home *** CD-ROM | disk | FTP | other *** search
| Microsoft Visual C/Basic Library | 1997-07-24 | 300.5 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Microsoft Visual C/Basic Library
(other/visualCLibrary).
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 1%
| dexvert
| Microsoft Visual C/Basic Library (other/visualCLibrary)
| magic
| Unsupported |
| 1%
| dexvert
| Sibelius Music / Score (music/sibeliusMusicScore)
| ext
| Unsupported |
| 1%
| dexvert
| IntelliFont Font (font/intelliFont)
| ext
| Unsupported |
| 1%
| dexvert
| Amiga Hunk Library/Object (other/amigaLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Amiga Shared Library (other/amigaSharedLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Chess Assistant File (other/chessAssistant)
| ext
| Unsupported |
| 1%
| dexvert
| COFF Library (other/coffLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Maple Library (other/mapleLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| TopSpeed Modula-2 Library (other/topSpeedModula2Library)
| ext
| Unsupported |
| 100%
| file
| Microsoft Visual C/OMF library, page size 16, at 0x29800 dictionary with 269 blocks (FFLAG=0xa6) 1st entry QueryServiceConfigA in page 1, 2nd record "advapi32", 3rd record COMMENT class=0xa0 OMF extensions IMPDEF ordinal AbortSystemShutdownA exported by ADVAPI32.dll
| default
| |
| 99%
| file
| data
| default
| |
| 100%
| TrID
| Microsoft Visual C Library
| default
| |
| 100%
| gt2
| C++ Bibliotheks Datei
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| f0 0d 00 00 98 02 00 0d | 01 00 00 00 00 00 00 00 |........|........|
|00000010| 80 0a 00 08 61 64 76 61 | 70 69 33 32 00 88 29 00 |....adva|pi32..).|
|00000020| 00 a0 01 01 14 41 62 6f | 72 74 53 79 73 74 65 6d |.....Abo|rtSystem|
|00000030| 53 68 75 74 64 6f 77 6e | 41 0c 41 44 56 41 50 49 |Shutdown|A.ADVAPI|
|00000040| 33 32 2e 64 6c 6c 01 00 | ee 88 29 00 00 a0 01 01 |32.dll..|..).....|
|00000050| 14 41 62 6f 72 74 53 79 | 73 74 65 6d 53 68 75 74 |.AbortSy|stemShut|
|00000060| 64 6f 77 6e 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |downW.AD|VAPI32.d|
|00000070| 6c 6c 02 00 d7 88 20 00 | 00 a0 01 01 0b 41 63 63 |ll.... .|.....Acc|
|00000080| 65 73 73 43 68 65 63 6b | 0c 41 44 56 41 50 49 33 |essCheck|.ADVAPI3|
|00000090| 32 2e 64 6c 6c 03 00 e8 | 88 2e 00 00 a0 01 01 19 |2.dll...|........|
|000000a0| 41 63 63 65 73 73 43 68 | 65 63 6b 41 6e 64 41 75 |AccessCh|eckAndAu|
|000000b0| 64 69 74 41 6c 61 72 6d | 41 0c 41 44 56 41 50 49 |ditAlarm|A.ADVAPI|
|000000c0| 33 32 2e 64 6c 6c 04 00 | 93 88 2e 00 00 a0 01 01 |32.dll..|........|
|000000d0| 19 41 63 63 65 73 73 43 | 68 65 63 6b 41 6e 64 41 |.AccessC|heckAndA|
|000000e0| 75 64 69 74 41 6c 61 72 | 6d 57 0c 41 44 56 41 50 |uditAlar|mW.ADVAP|
|000000f0| 49 33 32 2e 64 6c 6c 05 | 00 7c 88 28 00 00 a0 01 |I32.dll.|.|.(....|
|00000100| 01 13 41 64 64 41 63 63 | 65 73 73 41 6c 6c 6f 77 |..AddAcc|essAllow|
|00000110| 65 64 41 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |edAce.AD|VAPI32.d|
|00000120| 6c 6c 06 00 d9 88 27 00 | 00 a0 01 01 12 41 64 64 |ll....'.|.....Add|
|00000130| 41 63 63 65 73 73 44 65 | 6e 69 65 64 41 63 65 0c |AccessDe|niedAce.|
|00000140| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 07 00 59 88 |ADVAPI32|.dll..Y.|
|00000150| 1b 00 00 a0 01 01 06 41 | 64 64 41 63 65 0c 41 44 |.......A|ddAce.AD|
|00000160| 56 41 50 49 33 32 2e 64 | 6c 6c 08 00 0b 88 26 00 |VAPI32.d|ll....&.|
|00000170| 00 a0 01 01 11 41 64 64 | 41 75 64 69 74 41 63 63 |.....Add|AuditAcc|
|00000180| 65 73 73 41 63 65 0c 41 | 44 56 41 50 49 33 32 2e |essAce.A|DVAPI32.|
|00000190| 64 6c 6c 09 00 ab 88 26 | 00 00 a0 01 01 11 41 64 |dll....&|......Ad|
|000001a0| 6a 75 73 74 54 6f 6b 65 | 6e 47 72 6f 75 70 73 0c |justToke|nGroups.|
|000001b0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 0a 00 19 88 |ADVAPI32|.dll....|
|000001c0| 2a 00 00 a0 01 01 15 41 | 64 6a 75 73 74 54 6f 6b |*......A|djustTok|
|000001d0| 65 6e 50 72 69 76 69 6c | 65 67 65 73 0c 41 44 56 |enPrivil|eges.ADV|
|000001e0| 41 50 49 33 32 2e 64 6c | 6c 0b 00 76 88 2d 00 00 |API32.dl|l..v.-..|
|000001f0| a0 01 01 18 41 6c 6c 6f | 63 61 74 65 41 6e 64 49 |....Allo|cateAndI|
|00000200| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 0c 41 44 56 |nitializ|eSid.ADV|
|00000210| 41 50 49 33 32 2e 64 6c | 6c 0c 00 8b 88 2c 00 00 |API32.dl|l....,..|
|00000220| a0 01 01 17 41 6c 6c 6f | 63 61 74 65 4c 6f 63 61 |....Allo|cateLoca|
|00000230| 6c 6c 79 55 6e 69 71 75 | 65 49 64 0c 41 44 56 41 |llyUniqu|eId.ADVA|
|00000240| 50 49 33 32 2e 64 6c 6c | 0d 00 dd 88 2a 00 00 a0 |PI32.dll|....*...|
|00000250| 01 01 15 41 72 65 41 6c | 6c 41 63 63 65 73 73 65 |...AreAl|lAccesse|
|00000260| 73 47 72 61 6e 74 65 64 | 0c 41 44 56 41 50 49 33 |sGranted|.ADVAPI3|
|00000270| 32 2e 64 6c 6c 0e 00 d9 | 88 2a 00 00 a0 01 01 15 |2.dll...|.*......|
|00000280| 41 72 65 41 6e 79 41 63 | 63 65 73 73 65 73 47 72 |AreAnyAc|cessesGr|
|00000290| 61 6e 74 65 64 0c 41 44 | 56 41 50 49 33 32 2e 64 |anted.AD|VAPI32.d|
|000002a0| 6c 6c 0f 00 c9 88 24 00 | 00 a0 01 01 0f 42 61 63 |ll....$.|.....Bac|
|000002b0| 6b 75 70 45 76 65 6e 74 | 4c 6f 67 41 0c 41 44 56 |kupEvent|LogA.ADV|
|000002c0| 41 50 49 33 32 2e 64 6c | 6c 10 00 48 88 24 00 00 |API32.dl|l..H.$..|
|000002d0| a0 01 01 0f 42 61 63 6b | 75 70 45 76 65 6e 74 4c |....Back|upEventL|
|000002e0| 6f 67 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ogW.ADVA|PI32.dll|
|000002f0| 11 00 31 88 29 00 00 a0 | 01 01 14 43 68 61 6e 67 |..1.)...|...Chang|
|00000300| 65 53 65 72 76 69 63 65 | 43 6f 6e 66 69 67 41 0c |eService|ConfigA.|
|00000310| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 12 00 49 88 |ADVAPI32|.dll..I.|
|00000320| 29 00 00 a0 01 01 14 43 | 68 61 6e 67 65 53 65 72 |)......C|hangeSer|
|00000330| 76 69 63 65 43 6f 6e 66 | 69 67 57 0c 41 44 56 41 |viceConf|igW.ADVA|
|00000340| 50 49 33 32 2e 64 6c 6c | 13 00 32 88 23 00 00 a0 |PI32.dll|..2.#...|
|00000350| 01 01 0e 43 6c 65 61 72 | 45 76 65 6e 74 4c 6f 67 |...Clear|EventLog|
|00000360| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 14 00 |A.ADVAPI|32.dll..|
|00000370| b5 88 23 00 00 a0 01 01 | 0e 43 6c 65 61 72 45 76 |..#.....|.ClearEv|
|00000380| 65 6e 74 4c 6f 67 57 0c | 41 44 56 41 50 49 33 32 |entLogW.|ADVAPI32|
|00000390| 2e 64 6c 6c 15 00 9e 88 | 22 00 00 a0 01 01 0d 43 |.dll....|"......C|
|000003a0| 6c 6f 73 65 45 76 65 6e | 74 4c 6f 67 0c 41 44 56 |loseEven|tLog.ADV|
|000003b0| 41 50 49 33 32 2e 64 6c | 6c 16 00 e7 88 27 00 00 |API32.dl|l....'..|
|000003c0| a0 01 01 12 43 6c 6f 73 | 65 53 65 72 76 69 63 65 |....Clos|eService|
|000003d0| 48 61 6e 64 6c 65 0c 41 | 44 56 41 50 49 33 32 2e |Handle.A|DVAPI32.|
|000003e0| 64 6c 6c 17 00 e3 88 23 | 00 00 a0 01 01 0e 43 6f |dll....#|......Co|
|000003f0| 6e 74 72 6f 6c 53 65 72 | 76 69 63 65 0c 41 44 56 |ntrolSer|vice.ADV|
|00000400| 41 50 49 33 32 2e 64 6c | 6c 18 00 4b 88 1c 00 00 |API32.dl|l..K....|
|00000410| a0 01 01 07 43 6f 70 79 | 53 69 64 0c 41 44 56 41 |....Copy|Sid.ADVA|
|00000420| 50 49 33 32 2e 64 6c 6c | 19 00 4f 88 30 00 00 a0 |PI32.dll|..O.0...|
|00000430| 01 01 1b 43 72 65 61 74 | 65 50 72 69 76 61 74 65 |...Creat|ePrivate|
|00000440| 4f 62 6a 65 63 74 53 65 | 63 75 72 69 74 79 0c 41 |ObjectSe|curity.A|
|00000450| 44 56 41 50 49 33 32 2e | 64 6c 6c 1a 00 03 88 23 |DVAPI32.|dll....#|
|00000460| 00 00 a0 01 01 0e 43 72 | 65 61 74 65 53 65 72 76 |......Cr|eateServ|
|00000470| 69 63 65 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |iceA.ADV|API32.dl|
|00000480| 6c 1b 00 94 88 23 00 00 | a0 01 01 0e 43 72 65 61 |l....#..|....Crea|
|00000490| 74 65 53 65 72 76 69 63 | 65 57 0c 41 44 56 41 50 |teServic|eW.ADVAP|
|000004a0| 49 33 32 2e 64 6c 6c 1c | 00 7d 88 1e 00 00 a0 01 |I32.dll.|.}......|
|000004b0| 01 09 44 65 6c 65 74 65 | 41 63 65 0c 41 44 56 41 |..Delete|Ace.ADVA|
|000004c0| 50 49 33 32 2e 64 6c 6c | 1d 00 a6 88 22 00 00 a0 |PI32.dll|...."...|
|000004d0| 01 01 0d 44 65 6c 65 74 | 65 53 65 72 76 69 63 65 |...Delet|eService|
|000004e0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 1e 00 d5 |.ADVAPI3|2.dll...|
|000004f0| 88 2a 00 00 a0 01 01 15 | 44 65 72 65 67 69 73 74 |.*......|Deregist|
|00000500| 65 72 45 76 65 6e 74 53 | 6f 75 72 63 65 0c 41 44 |erEventS|ource.AD|
|00000510| 56 41 50 49 33 32 2e 64 | 6c 6c 1f 00 67 88 31 00 |VAPI32.d|ll..g.1.|
|00000520| 00 a0 01 01 1c 44 65 73 | 74 72 6f 79 50 72 69 76 |.....Des|troyPriv|
|00000530| 61 74 65 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |ateObjec|tSecurit|
|00000540| 79 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 20 00 |y.ADVAPI|32.dll .|
|00000550| 65 88 23 00 00 a0 01 01 | 0e 44 75 70 6c 69 63 61 |e.#.....|.Duplica|
|00000560| 74 65 54 6f 6b 65 6e 0c | 41 44 56 41 50 49 33 32 |teToken.|ADVAPI32|
|00000570| 2e 64 6c 6c 21 00 58 88 | 2b 00 00 a0 01 01 16 45 |.dll!.X.|+......E|
|00000580| 6c 66 42 61 63 6b 75 70 | 45 76 65 6e 74 4c 6f 67 |lfBackup|EventLog|
|00000590| 46 69 6c 65 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |FileA.AD|VAPI32.d|
|000005a0| 6c 6c 22 00 91 88 2b 00 | 00 a0 01 01 16 45 6c 66 |ll"...+.|.....Elf|
|000005b0| 42 61 63 6b 75 70 45 76 | 65 6e 74 4c 6f 67 46 69 |BackupEv|entLogFi|
|000005c0| 6c 65 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |leW.ADVA|PI32.dll|
|000005d0| 23 00 7a 88 24 00 00 a0 | 01 01 0f 45 6c 66 43 68 |#.z.$...|...ElfCh|
|000005e0| 61 6e 67 65 4e 6f 74 69 | 66 79 0c 41 44 56 41 50 |angeNoti|fy.ADVAP|
|000005f0| 49 33 32 2e 64 6c 6c 24 | 00 19 88 2a 00 00 a0 01 |I32.dll$|...*....|
|00000600| 01 15 45 6c 66 43 6c 65 | 61 72 45 76 65 6e 74 4c |..ElfCle|arEventL|
|00000610| 6f 67 46 69 6c 65 41 0c | 41 44 56 41 50 49 33 32 |ogFileA.|ADVAPI32|
|00000620| 2e 64 6c 6c 25 00 ff 88 | 2a 00 00 a0 01 01 15 45 |.dll%...|*......E|
|00000630| 6c 66 43 6c 65 61 72 45 | 76 65 6e 74 4c 6f 67 46 |lfClearE|ventLogF|
|00000640| 69 6c 65 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ileW.ADV|API32.dl|
|00000650| 6c 26 00 e8 88 25 00 00 | a0 01 01 10 45 6c 66 43 |l&...%..|....ElfC|
|00000660| 6c 6f 73 65 45 76 65 6e | 74 4c 6f 67 0c 41 44 56 |loseEven|tLog.ADV|
|00000670| 41 50 49 33 32 2e 64 6c | 6c 27 00 b9 88 2d 00 00 |API32.dl|l'...-..|
|00000680| a0 01 01 18 45 6c 66 44 | 65 72 65 67 69 73 74 65 |....ElfD|eregiste|
|00000690| 72 45 76 65 6e 74 53 6f | 75 72 63 65 0c 41 44 56 |rEventSo|urce.ADV|
|000006a0| 41 50 49 33 32 2e 64 6c | 6c 28 00 41 88 27 00 00 |API32.dl|l(.A.'..|
|000006b0| a0 01 01 12 45 6c 66 4e | 75 6d 62 65 72 4f 66 52 |....ElfN|umberOfR|
|000006c0| 65 63 6f 72 64 73 0c 41 | 44 56 41 50 49 33 32 2e |ecords.A|DVAPI32.|
|000006d0| 64 6c 6c 29 00 dd 88 24 | 00 00 a0 01 01 0f 45 6c |dll)...$|......El|
|000006e0| 66 4f 6c 64 65 73 74 52 | 65 63 6f 72 64 0c 41 44 |fOldestR|ecord.AD|
|000006f0| 56 41 50 49 33 32 2e 64 | 6c 6c 2a 00 08 88 2b 00 |VAPI32.d|ll*...+.|
|00000700| 00 a0 01 01 16 45 6c 66 | 4f 70 65 6e 42 61 63 6b |.....Elf|OpenBack|
|00000710| 75 70 45 76 65 6e 74 4c | 6f 67 41 0c 41 44 56 41 |upEventL|ogA.ADVA|
|00000720| 50 49 33 32 2e 64 6c 6c | 2b 00 76 88 2b 00 00 a0 |PI32.dll|+.v.+...|
|00000730| 01 01 16 45 6c 66 4f 70 | 65 6e 42 61 63 6b 75 70 |...ElfOp|enBackup|
|00000740| 45 76 65 6e 74 4c 6f 67 | 57 0c 41 44 56 41 50 49 |EventLog|W.ADVAPI|
|00000750| 33 32 2e 64 6c 6c 2c 00 | 5f 88 25 00 00 a0 01 01 |32.dll,.|_.%.....|
|00000760| 10 45 6c 66 4f 70 65 6e | 45 76 65 6e 74 4c 6f 67 |.ElfOpen|EventLog|
|00000770| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 2d 00 |A.ADVAPI|32.dll-.|
|00000780| d6 88 25 00 00 a0 01 01 | 10 45 6c 66 4f 70 65 6e |..%.....|.ElfOpen|
|00000790| 45 76 65 6e 74 4c 6f 67 | 57 0c 41 44 56 41 50 49 |EventLog|W.ADVAPI|
|000007a0| 33 32 2e 64 6c 6c 2e 00 | bf 88 25 00 00 a0 01 01 |32.dll..|..%.....|
|000007b0| 10 45 6c 66 52 65 61 64 | 45 76 65 6e 74 4c 6f 67 |.ElfRead|EventLog|
|000007c0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 2f 00 |A.ADVAPI|32.dll/.|
|000007d0| ea 88 25 00 00 a0 01 01 | 10 45 6c 66 52 65 61 64 |..%.....|.ElfRead|
|000007e0| 45 76 65 6e 74 4c 6f 67 | 57 0c 41 44 56 41 50 49 |EventLog|W.ADVAPI|
|000007f0| 33 32 2e 64 6c 6c 30 00 | d3 88 2c 00 00 a0 01 01 |32.dll0.|..,.....|
|00000800| 17 45 6c 66 52 65 67 69 | 73 74 65 72 45 76 65 6e |.ElfRegi|sterEven|
|00000810| 74 53 6f 75 72 63 65 41 | 0c 41 44 56 41 50 49 33 |tSourceA|.ADVAPI3|
|00000820| 32 2e 64 6c 6c 31 00 c2 | 88 2c 00 00 a0 01 01 17 |2.dll1..|.,......|
|00000830| 45 6c 66 52 65 67 69 73 | 74 65 72 45 76 65 6e 74 |ElfRegis|terEvent|
|00000840| 53 6f 75 72 63 65 57 0c | 41 44 56 41 50 49 33 32 |SourceW.|ADVAPI32|
|00000850| 2e 64 6c 6c 32 00 ab 88 | 24 00 00 a0 01 01 0f 45 |.dll2...|$......E|
|00000860| 6c 66 52 65 70 6f 72 74 | 45 76 65 6e 74 41 0c 41 |lfReport|EventA.A|
|00000870| 44 56 41 50 49 33 32 2e | 64 6c 6c 33 00 0a 88 24 |DVAPI32.|dll3...$|
|00000880| 00 00 a0 01 01 0f 45 6c | 66 52 65 70 6f 72 74 45 |......El|fReportE|
|00000890| 76 65 6e 74 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |ventW.AD|VAPI32.d|
|000008a0| 6c 6c 34 00 f3 88 2b 00 | 00 a0 01 01 16 45 6e 75 |ll4...+.|.....Enu|
|000008b0| 6d 44 65 70 65 6e 64 65 | 6e 74 53 65 72 76 69 63 |mDepende|ntServic|
|000008c0| 65 73 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |esA.ADVA|PI32.dll|
|000008d0| 35 00 1f 88 2b 00 00 a0 | 01 01 16 45 6e 75 6d 44 |5...+...|...EnumD|
|000008e0| 65 70 65 6e 64 65 6e 74 | 53 65 72 76 69 63 65 73 |ependent|Services|
|000008f0| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 36 00 |W.ADVAPI|32.dll6.|
|00000900| 08 88 28 00 00 a0 01 01 | 13 45 6e 75 6d 53 65 72 |..(.....|.EnumSer|
|00000910| 76 69 63 65 73 53 74 61 | 74 75 73 41 0c 41 44 56 |vicesSta|tusA.ADV|
|00000920| 41 50 49 33 32 2e 64 6c | 6c 37 00 36 88 28 00 00 |API32.dl|l7.6.(..|
|00000930| a0 01 01 13 45 6e 75 6d | 53 65 72 76 69 63 65 73 |....Enum|Services|
|00000940| 53 74 61 74 75 73 57 0c | 41 44 56 41 50 49 33 32 |StatusW.|ADVAPI32|
|00000950| 2e 64 6c 6c 38 00 1f 88 | 23 00 00 a0 01 01 0e 45 |.dll8...|#......E|
|00000960| 71 75 61 6c 50 72 65 66 | 69 78 53 69 64 0c 41 44 |qualPref|ixSid.AD|
|00000970| 56 41 50 49 33 32 2e 64 | 6c 6c 39 00 56 88 1d 00 |VAPI32.d|ll9.V...|
|00000980| 00 a0 01 01 08 45 71 75 | 61 6c 53 69 64 0c 41 44 |.....Equ|alSid.AD|
|00000990| 56 41 50 49 33 32 2e 64 | 6c 6c 3a 00 cf 88 25 00 |VAPI32.d|ll:...%.|
|000009a0| 00 a0 01 01 10 46 69 6e | 64 46 69 72 73 74 46 72 |.....Fin|dFirstFr|
|000009b0| 65 65 41 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |eeAce.AD|VAPI32.d|
|000009c0| 6c 6c 3b 00 c2 88 1c 00 | 00 a0 01 01 07 46 72 65 |ll;.....|.....Fre|
|000009d0| 65 53 69 64 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |eSid.ADV|API32.dl|
|000009e0| 6c 3c 00 45 88 1b 00 00 | a0 01 01 06 47 65 74 41 |l<.E....|....GetA|
|000009f0| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 3d |ce.ADVAP|I32.dll=|
|00000a00| 00 bf 88 26 00 00 a0 01 | 01 11 47 65 74 41 63 6c |...&....|..GetAcl|
|00000a10| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 0c 41 44 56 41 |Informat|ion.ADVA|
|00000a20| 50 49 33 32 2e 64 6c 6c | 3e 00 1b 88 25 00 00 a0 |PI32.dll|>...%...|
|00000a30| 01 01 10 47 65 74 46 69 | 6c 65 53 65 63 75 72 69 |...GetFi|leSecuri|
|00000a40| 74 79 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |tyA.ADVA|PI32.dll|
|00000a50| 3f 00 99 88 25 00 00 a0 | 01 01 10 47 65 74 46 69 |?...%...|...GetFi|
|00000a60| 6c 65 53 65 63 75 72 69 | 74 79 57 0c 41 44 56 41 |leSecuri|tyW.ADVA|
|00000a70| 50 49 33 32 2e 64 6c 6c | 40 00 82 88 2c 00 00 a0 |PI32.dll|@...,...|
|00000a80| 01 01 17 47 65 74 4b 65 | 72 6e 65 6c 4f 62 6a 65 |...GetKe|rnelObje|
|00000a90| 63 74 53 65 63 75 72 69 | 74 79 0c 41 44 56 41 50 |ctSecuri|ty.ADVAP|
|00000aa0| 49 33 32 2e 64 6c 6c 41 | 00 92 88 21 00 00 a0 01 |I32.dllA|...!....|
|00000ab0| 01 0c 47 65 74 4c 65 6e | 67 74 68 53 69 64 0c 41 |..GetLen|gthSid.A|
|00000ac0| 44 56 41 50 49 33 32 2e | 64 6c 6c 42 00 35 88 2f |DVAPI32.|dllB.5./|
|00000ad0| 00 00 a0 01 01 1a 47 65 | 74 4e 75 6d 62 65 72 4f |......Ge|tNumberO|
|00000ae0| 66 45 76 65 6e 74 4c 6f | 67 52 65 63 6f 72 64 73 |fEventLo|gRecords|
|00000af0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 43 00 86 |.ADVAPI3|2.dllC..|
|00000b00| 88 2c 00 00 a0 01 01 17 | 47 65 74 4f 6c 64 65 73 |.,......|GetOldes|
|00000b10| 74 45 76 65 6e 74 4c 6f | 67 52 65 63 6f 72 64 0c |tEventLo|gRecord.|
|00000b20| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 44 00 b1 88 |ADVAPI32|.dllD...|
|00000b30| 2d 00 00 a0 01 01 18 47 | 65 74 50 72 69 76 61 74 |-......G|etPrivat|
|00000b40| 65 4f 62 6a 65 63 74 53 | 65 63 75 72 69 74 79 0c |eObjectS|ecurity.|
|00000b50| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 45 00 12 88 |ADVAPI32|.dllE...|
|00000b60| 31 00 00 a0 01 01 1c 47 | 65 74 53 65 63 75 72 69 |1......G|etSecuri|
|00000b70| 74 79 44 65 73 63 72 69 | 70 74 6f 72 43 6f 6e 74 |tyDescri|ptorCont|
|00000b80| 72 6f 6c 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |rol.ADVA|PI32.dll|
|00000b90| 46 00 3b 88 2e 00 00 a0 | 01 01 19 47 65 74 53 65 |F.;.....|...GetSe|
|00000ba0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000bb0| 44 61 63 6c 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |Dacl.ADV|API32.dl|
|00000bc0| 6c 47 00 ad 88 2f 00 00 | a0 01 01 1a 47 65 74 53 |lG.../..|....GetS|
|00000bd0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000be0| 72 47 72 6f 75 70 0c 41 | 44 56 41 50 49 33 32 2e |rGroup.A|DVAPI32.|
|00000bf0| 64 6c 6c 48 00 11 88 30 | 00 00 a0 01 01 1b 47 65 |dllH...0|......Ge|
|00000c00| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00000c10| 74 6f 72 4c 65 6e 67 74 | 68 0c 41 44 56 41 50 49 |torLengt|h.ADVAPI|
|00000c20| 33 32 2e 64 6c 6c 49 00 | b9 88 2f 00 00 a0 01 01 |32.dllI.|../.....|
|00000c30| 1a 47 65 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |.GetSecu|rityDesc|
|00000c40| 72 69 70 74 6f 72 4f 77 | 6e 65 72 0c 41 44 56 41 |riptorOw|ner.ADVA|
|00000c50| 50 49 33 32 2e 64 6c 6c | 4a 00 11 88 2e 00 00 a0 |PI32.dll|J.......|
|00000c60| 01 01 19 47 65 74 53 65 | 63 75 72 69 74 79 44 65 |...GetSe|curityDe|
|00000c70| 73 63 72 69 70 74 6f 72 | 53 61 63 6c 0c 41 44 56 |scriptor|Sacl.ADV|
|00000c80| 41 50 49 33 32 2e 64 6c | 6c 4b 00 9a 88 2b 00 00 |API32.dl|lK...+..|
|00000c90| a0 01 01 16 47 65 74 53 | 65 72 76 69 63 65 44 69 |....GetS|erviceDi|
|00000ca0| 73 70 6c 61 79 4e 61 6d | 65 41 0c 41 44 56 41 50 |splayNam|eA.ADVAP|
|00000cb0| 49 33 32 2e 64 6c 6c 4c | 00 30 88 2b 00 00 a0 01 |I32.dllL|.0.+....|
|00000cc0| 01 16 47 65 74 53 65 72 | 76 69 63 65 44 69 73 70 |..GetSer|viceDisp|
|00000cd0| 6c 61 79 4e 61 6d 65 57 | 0c 41 44 56 41 50 49 33 |layNameW|.ADVAPI3|
|00000ce0| 32 2e 64 6c 6c 4d 00 19 | 88 27 00 00 a0 01 01 12 |2.dllM..|.'......|
|00000cf0| 47 65 74 53 65 72 76 69 | 63 65 4b 65 79 4e 61 6d |GetServi|ceKeyNam|
|00000d00| 65 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 4e |eA.ADVAP|I32.dllN|
|00000d10| 00 e3 88 27 00 00 a0 01 | 01 12 47 65 74 53 65 72 |...'....|..GetSer|
|00000d20| 76 69 63 65 4b 65 79 4e | 61 6d 65 57 0c 41 44 56 |viceKeyN|ameW.ADV|
|00000d30| 41 50 49 33 32 2e 64 6c | 6c 4f 00 cc 88 2e 00 00 |API32.dl|lO......|
|00000d40| a0 01 01 19 47 65 74 53 | 69 64 49 64 65 6e 74 69 |....GetS|idIdenti|
|00000d50| 66 69 65 72 41 75 74 68 | 6f 72 69 74 79 0c 41 44 |fierAuth|ority.AD|
|00000d60| 56 41 50 49 33 32 2e 64 | 6c 6c 50 00 a3 88 29 00 |VAPI32.d|llP...).|
|00000d70| 00 a0 01 01 14 47 65 74 | 53 69 64 4c 65 6e 67 74 |.....Get|SidLengt|
|00000d80| 68 52 65 71 75 69 72 65 | 64 0c 41 44 56 41 50 49 |hRequire|d.ADVAPI|
|00000d90| 33 32 2e 64 6c 6c 51 00 | d5 88 27 00 00 a0 01 01 |32.dllQ.|..'.....|
|00000da0| 12 47 65 74 53 69 64 53 | 75 62 41 75 74 68 6f 72 |.GetSidS|ubAuthor|
|00000db0| 69 74 79 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ity.ADVA|PI32.dll|
|00000dc0| 52 00 88 88 2c 00 00 a0 | 01 01 17 47 65 74 53 69 |R...,...|...GetSi|
|00000dd0| 64 53 75 62 41 75 74 68 | 6f 72 69 74 79 43 6f 75 |dSubAuth|orityCou|
|00000de0| 6e 74 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 53 |nt.ADVAP|I32.dllS|
|00000df0| 00 74 88 28 00 00 a0 01 | 01 13 47 65 74 54 6f 6b |.t.(....|..GetTok|
|00000e00| 65 6e 49 6e 66 6f 72 6d | 61 74 69 6f 6e 0c 41 44 |enInform|ation.AD|
|00000e10| 56 41 50 49 33 32 2e 64 | 6c 6c 54 00 10 88 21 00 |VAPI32.d|llT...!.|
|00000e20| 00 a0 01 01 0c 47 65 74 | 55 73 65 72 4e 61 6d 65 |.....Get|UserName|
|00000e30| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 55 00 |A.ADVAPI|32.dllU.|
|00000e40| 43 88 21 00 00 a0 01 01 | 0c 47 65 74 55 73 65 72 |C.!.....|.GetUser|
|00000e50| 4e 61 6d 65 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |NameW.AD|VAPI32.d|
|00000e60| 6c 6c 56 00 2c 88 28 00 | 00 a0 01 01 13 49 5f 53 |llV.,.(.|.....I_S|
|00000e70| 63 53 65 74 53 65 72 76 | 69 63 65 42 69 74 73 41 |cSetServ|iceBitsA|
|00000e80| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 57 00 86 |.ADVAPI3|2.dllW..|
|00000e90| 88 28 00 00 a0 01 01 13 | 49 5f 53 63 53 65 74 53 |.(......|I_ScSetS|
|00000ea0| 65 72 76 69 63 65 42 69 | 74 73 57 0c 41 44 56 41 |erviceBi|tsW.ADVA|
|00000eb0| 50 49 33 32 2e 64 6c 6c | 58 00 6f 88 2f 00 00 a0 |PI32.dll|X.o./...|
|00000ec0| 01 01 1a 49 6d 70 65 72 | 73 6f 6e 61 74 65 4e 61 |...Imper|sonateNa|
|00000ed0| 6d 65 64 50 69 70 65 43 | 6c 69 65 6e 74 0c 41 44 |medPipeC|lient.AD|
|00000ee0| 56 41 50 49 33 32 2e 64 | 6c 6c 59 00 4b 88 24 00 |VAPI32.d|llY.K.$.|
|00000ef0| 00 a0 01 01 0f 49 6d 70 | 65 72 73 6f 6e 61 74 65 |.....Imp|ersonate|
|00000f00| 53 65 6c 66 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |Self.ADV|API32.dl|
|00000f10| 6c 5a 00 a8 88 22 00 00 | a0 01 01 0d 49 6e 69 74 |lZ..."..|....Init|
|00000f20| 69 61 6c 69 7a 65 41 63 | 6c 0c 41 44 56 41 50 49 |ializeAc|l.ADVAPI|
|00000f30| 33 32 2e 64 6c 6c 5b 00 | 9a 88 31 00 00 a0 01 01 |32.dll[.|..1.....|
|00000f40| 1c 49 6e 69 74 69 61 6c | 69 7a 65 53 65 63 75 72 |.Initial|izeSecur|
|00000f50| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 0c 41 44 |ityDescr|iptor.AD|
|00000f60| 56 41 50 49 33 32 2e 64 | 6c 6c 5c 00 14 88 22 00 |VAPI32.d|ll\...".|
|00000f70| 00 a0 01 01 0d 49 6e 69 | 74 69 61 6c 69 7a 65 53 |.....Ini|tializeS|
|00000f80| 69 64 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 5d |id.ADVAP|I32.dll]|
|00000f90| 00 88 88 2c 00 00 a0 01 | 01 17 49 6e 69 74 69 61 |...,....|..Initia|
|00000fa0| 74 65 53 79 73 74 65 6d | 53 68 75 74 64 6f 77 6e |teSystem|Shutdown|
|00000fb0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 5e 00 |A.ADVAPI|32.dll^.|
|00000fc0| 4c 88 2c 00 00 a0 01 01 | 17 49 6e 69 74 69 61 74 |L.,.....|.Initiat|
|00000fd0| 65 53 79 73 74 65 6d 53 | 68 75 74 64 6f 77 6e 57 |eSystemS|hutdownW|
|00000fe0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 5f 00 35 |.ADVAPI3|2.dll_.5|
|00000ff0| 88 22 00 00 a0 01 01 0d | 49 73 54 65 78 74 55 6e |."......|IsTextUn|
|00001000| 69 63 6f 64 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |icode.AD|VAPI32.d|
|00001010| 6c 6c 60 00 8f 88 1f 00 | 00 a0 01 01 0a 49 73 56 |ll`.....|.....IsV|
|00001020| 61 6c 69 64 41 63 6c 0c | 41 44 56 41 50 49 33 32 |alidAcl.|ADVAPI32|
|00001030| 2e 64 6c 6c 61 00 00 88 | 2e 00 00 a0 01 01 19 49 |.dlla...|.......I|
|00001040| 73 56 61 6c 69 64 53 65 | 63 75 72 69 74 79 44 65 |sValidSe|curityDe|
|00001050| 73 63 72 69 70 74 6f 72 | 0c 41 44 56 41 50 49 33 |scriptor|.ADVAPI3|
|00001060| 32 2e 64 6c 6c 62 00 7a | 88 1f 00 00 a0 01 01 0a |2.dllb.z|........|
|00001070| 49 73 56 61 6c 69 64 53 | 69 64 0c 41 44 56 41 50 |IsValidS|id.ADVAP|
|00001080| 49 33 32 2e 64 6c 6c 63 | 00 ee 88 28 00 00 a0 01 |I32.dllc|...(....|
|00001090| 01 13 4c 6f 63 6b 53 65 | 72 76 69 63 65 44 61 74 |..LockSe|rviceDat|
|000010a0| 61 62 61 73 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |abase.AD|VAPI32.d|
|000010b0| 6c 6c 64 00 38 88 27 00 | 00 a0 01 01 12 4c 6f 6f |lld.8.'.|.....Loo|
|000010c0| 6b 75 70 41 63 63 6f 75 | 6e 74 4e 61 6d 65 41 0c |kupAccou|ntNameA.|
|000010d0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 65 00 9f 88 |ADVAPI32|.dlle...|
|000010e0| 27 00 00 a0 01 01 12 4c | 6f 6f 6b 75 70 41 63 63 |'......L|ookupAcc|
|000010f0| 6f 75 6e 74 4e 61 6d 65 | 57 0c 41 44 56 41 50 49 |ountName|W.ADVAPI|
|00001100| 33 32 2e 64 6c 6c 66 00 | 88 88 26 00 00 a0 01 01 |32.dllf.|..&.....|
|00001110| 11 4c 6f 6f 6b 75 70 41 | 63 63 6f 75 6e 74 53 69 |.LookupA|ccountSi|
|00001120| 64 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 67 |dA.ADVAP|I32.dllg|
|00001130| 00 00 88 26 00 00 a0 01 | 01 11 4c 6f 6f 6b 75 70 |...&....|..Lookup|
|00001140| 41 63 63 6f 75 6e 74 53 | 69 64 57 0c 41 44 56 41 |AccountS|idW.ADVA|
|00001150| 50 49 33 32 2e 64 6c 6c | 68 00 e9 88 30 00 00 a0 |PI32.dll|h...0...|
|00001160| 01 01 1b 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |...Looku|pPrivile|
|00001170| 67 65 44 69 73 70 6c 61 | 79 4e 61 6d 65 41 0c 41 |geDispla|yNameA.A|
|00001180| 44 56 41 50 49 33 32 2e | 64 6c 6c 69 00 d9 88 30 |DVAPI32.|dlli...0|
|00001190| 00 00 a0 01 01 1b 4c 6f | 6f 6b 75 70 50 72 69 76 |......Lo|okupPriv|
|000011a0| 69 6c 65 67 65 44 69 73 | 70 6c 61 79 4e 61 6d 65 |ilegeDis|playName|
|000011b0| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 6a 00 |W.ADVAPI|32.dllj.|
|000011c0| c2 88 29 00 00 a0 01 01 | 14 4c 6f 6f 6b 75 70 50 |..).....|.LookupP|
|000011d0| 72 69 76 69 6c 65 67 65 | 4e 61 6d 65 41 0c 41 44 |rivilege|NameA.AD|
|000011e0| 56 41 50 49 33 32 2e 64 | 6c 6c 6b 00 bb 88 29 00 |VAPI32.d|llk...).|
|000011f0| 00 a0 01 01 14 4c 6f 6f | 6b 75 70 50 72 69 76 69 |.....Loo|kupPrivi|
|00001200| 6c 65 67 65 4e 61 6d 65 | 57 0c 41 44 56 41 50 49 |legeName|W.ADVAPI|
|00001210| 33 32 2e 64 6c 6c 6c 00 | a4 88 2a 00 00 a0 01 01 |32.dlll.|..*.....|
|00001220| 15 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|00001230| 56 61 6c 75 65 41 0c 41 | 44 56 41 50 49 33 32 2e |ValueA.A|DVAPI32.|
|00001240| 64 6c 6c 6d 00 3b 88 2a | 00 00 a0 01 01 15 4c 6f |dllm.;.*|......Lo|
|00001250| 6f 6b 75 70 50 72 69 76 | 69 6c 65 67 65 56 61 6c |okupPriv|ilegeVal|
|00001260| 75 65 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ueW.ADVA|PI32.dll|
|00001270| 6e 00 24 88 2e 00 00 a0 | 01 01 19 4c 73 61 41 64 |n.$.....|...LsaAd|
|00001280| 64 50 72 69 76 69 6c 65 | 67 65 73 54 6f 41 63 63 |dPrivile|gesToAcc|
|00001290| 6f 75 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ount.ADV|API32.dl|
|000012a0| 6c 6f 00 bd 88 25 00 00 | a0 01 01 10 4c 73 61 43 |lo...%..|....LsaC|
|000012b0| 6c 65 61 72 41 75 64 69 | 74 4c 6f 67 0c 41 44 56 |learAudi|tLog.ADV|
|000012c0| 41 50 49 33 32 2e 64 6c | 6c 70 00 81 88 1d 00 00 |API32.dl|lp......|
|000012d0| a0 01 01 08 4c 73 61 43 | 6c 6f 73 65 0c 41 44 56 |....LsaC|lose.ADV|
|000012e0| 41 50 49 33 32 2e 64 6c | 6c 71 00 9a 88 25 00 00 |API32.dl|lq...%..|
|000012f0| a0 01 01 10 4c 73 61 43 | 72 65 61 74 65 41 63 63 |....LsaC|reateAcc|
|00001300| 6f 75 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ount.ADV|API32.dl|
|00001310| 6c 72 00 5e 88 24 00 00 | a0 01 01 0f 4c 73 61 43 |lr.^.$..|....LsaC|
|00001320| 72 65 61 74 65 53 65 63 | 72 65 74 0c 41 44 56 41 |reateSec|ret.ADVA|
|00001330| 50 49 33 32 2e 64 6c 6c | 73 00 c6 88 2b 00 00 a0 |PI32.dll|s...+...|
|00001340| 01 01 16 4c 73 61 43 72 | 65 61 74 65 54 72 75 73 |...LsaCr|eateTrus|
|00001350| 74 65 64 44 6f 6d 61 69 | 6e 0c 41 44 56 41 50 49 |tedDomai|n.ADVAPI|
|00001360| 33 32 2e 64 6c 6c 74 00 | da 88 1e 00 00 a0 01 01 |32.dllt.|........|
|00001370| 09 4c 73 61 44 65 6c 65 | 74 65 0c 41 44 56 41 50 |.LsaDele|te.ADVAP|
|00001380| 49 33 32 2e 64 6c 6c 75 | 00 37 88 29 00 00 a0 01 |I32.dllu|.7.)....|
|00001390| 01 14 4c 73 61 45 6e 75 | 6d 65 72 61 74 65 41 63 |..LsaEnu|merateAc|
|000013a0| 63 6f 75 6e 74 73 0c 41 | 44 56 41 50 49 33 32 2e |counts.A|DVAPI32.|
|000013b0| 64 6c 6c 76 00 8d 88 2b | 00 00 a0 01 01 16 4c 73 |dllv...+|......Ls|
|000013c0| 61 45 6e 75 6d 65 72 61 | 74 65 50 72 69 76 69 6c |aEnumera|tePrivil|
|000013d0| 65 67 65 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |eges.ADV|API32.dl|
|000013e0| 6c 77 00 ae 88 34 00 00 | a0 01 01 1f 4c 73 61 45 |lw...4..|....LsaE|
|000013f0| 6e 75 6d 65 72 61 74 65 | 50 72 69 76 69 6c 65 67 |numerate|Privileg|
|00001400| 65 73 4f 66 41 63 63 6f | 75 6e 74 0c 41 44 56 41 |esOfAcco|unt.ADVA|
|00001410| 50 49 33 32 2e 64 6c 6c | 78 00 19 88 2f 00 00 a0 |PI32.dll|x.../...|
|00001420| 01 01 1a 4c 73 61 45 6e | 75 6d 65 72 61 74 65 54 |...LsaEn|umerateT|
|00001430| 72 75 73 74 65 64 44 6f | 6d 61 69 6e 73 0c 41 44 |rustedDo|mains.AD|
|00001440| 56 41 50 49 33 32 2e 64 | 6c 6c 79 00 08 88 22 00 |VAPI32.d|lly...".|
|00001450| 00 a0 01 01 0d 4c 73 61 | 46 72 65 65 4d 65 6d 6f |.....Lsa|FreeMemo|
|00001460| 72 79 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 7a |ry.ADVAP|I32.dllz|
|00001470| 00 82 88 2b 00 00 a0 01 | 01 16 4c 73 61 47 65 74 |...+....|..LsaGet|
|00001480| 51 75 6f 74 61 73 46 6f | 72 41 63 63 6f 75 6e 74 |QuotasFo|rAccount|
|00001490| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 7b 00 d9 |.ADVAPI3|2.dll{..|
|000014a0| 88 2e 00 00 a0 01 01 19 | 4c 73 61 47 65 74 53 79 |........|LsaGetSy|
|000014b0| 73 74 65 6d 41 63 63 65 | 73 73 41 63 63 6f 75 6e |stemAcce|ssAccoun|
|000014c0| 74 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 7c 00 |t.ADVAPI|32.dll|.|
|000014d0| 9f 88 25 00 00 a0 01 01 | 10 4c 73 61 49 43 4c 6f |..%.....|.LsaICLo|
|000014e0| 6f 6b 75 70 4e 61 6d 65 | 73 0c 41 44 56 41 50 49 |okupName|s.ADVAPI|
|000014f0| 33 32 2e 64 6c 6c 7d 00 | 7a 88 24 00 00 a0 01 01 |32.dll}.|z.$.....|
|00001500| 0f 4c 73 61 49 43 4c 6f | 6f 6b 75 70 53 69 64 73 |.LsaICLo|okupSids|
|00001510| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 7e 00 dc |.ADVAPI3|2.dll~..|
|00001520| 88 23 00 00 a0 01 01 0e | 4c 73 61 4c 6f 6f 6b 75 |.#......|LsaLooku|
|00001530| 70 4e 61 6d 65 73 0c 41 | 44 56 41 50 49 33 32 2e |pNames.A|DVAPI32.|
|00001540| 64 6c 6c 7f 00 08 88 32 | 00 00 a0 01 01 1d 4c 73 |dll....2|......Ls|
|00001550| 61 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |aLookupP|rivilege|
|00001560| 44 69 73 70 6c 61 79 4e | 61 6d 65 0c 41 44 56 41 |DisplayN|ame.ADVA|
|00001570| 50 49 33 32 2e 64 6c 6c | 80 00 df 88 2b 00 00 a0 |PI32.dll|....+...|
|00001580| 01 01 16 4c 73 61 4c 6f | 6f 6b 75 70 50 72 69 76 |...LsaLo|okupPriv|
|00001590| 69 6c 65 67 65 4e 61 6d | 65 0c 41 44 56 41 50 49 |ilegeNam|e.ADVAPI|
|000015a0| 33 32 2e 64 6c 6c 81 00 | c2 88 2c 00 00 a0 01 01 |32.dll..|..,.....|
|000015b0| 17 4c 73 61 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |.LsaLook|upPrivil|
|000015c0| 65 67 65 56 61 6c 75 65 | 0c 41 44 56 41 50 49 33 |egeValue|.ADVAPI3|
|000015d0| 32 2e 64 6c 6c 82 00 43 | 88 22 00 00 a0 01 01 0d |2.dll..C|."......|
|000015e0| 4c 73 61 4c 6f 6f 6b 75 | 70 53 69 64 73 0c 41 44 |LsaLooku|pSids.AD|
|000015f0| 56 41 50 49 33 32 2e 64 | 6c 6c 83 00 67 88 23 00 |VAPI32.d|ll..g.#.|
|00001600| 00 a0 01 01 0e 4c 73 61 | 4f 70 65 6e 41 63 63 6f |.....Lsa|OpenAcco|
|00001610| 75 6e 74 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |unt.ADVA|PI32.dll|
|00001620| 84 00 12 88 22 00 00 a0 | 01 01 0d 4c 73 61 4f 70 |...."...|...LsaOp|
|00001630| 65 6e 50 6f 6c 69 63 79 | 0c 41 44 56 41 50 49 33 |enPolicy|.ADVAPI3|
|00001640| 32 2e 64 6c 6c 85 00 70 | 88 22 00 00 a0 01 01 0d |2.dll..p|."......|
|00001650| 4c 73 61 4f 70 65 6e 53 | 65 63 72 65 74 0c 41 44 |LsaOpenS|ecret.AD|
|00001660| 56 41 50 49 33 32 2e 64 | 6c 6c 86 00 79 88 29 00 |VAPI32.d|ll..y.).|
|00001670| 00 a0 01 01 14 4c 73 61 | 4f 70 65 6e 54 72 75 73 |.....Lsa|OpenTrus|
|00001680| 74 65 64 44 6f 6d 61 69 | 6e 0c 41 44 56 41 50 49 |tedDomai|n.ADVAPI|
|00001690| 33 32 2e 64 6c 6c 87 00 | 8d 88 2e 00 00 a0 01 01 |32.dll..|........|
|000016a0| 19 4c 73 61 51 75 65 72 | 79 49 6e 66 6f 54 72 75 |.LsaQuer|yInfoTru|
|000016b0| 73 74 65 64 44 6f 6d 61 | 69 6e 0c 41 44 56 41 50 |stedDoma|in.ADVAP|
|000016c0| 49 33 32 2e 64 6c 6c 88 | 00 72 88 2e 00 00 a0 01 |I32.dll.|.r......|
|000016d0| 01 19 4c 73 61 51 75 65 | 72 79 49 6e 66 6f 72 6d |..LsaQue|ryInform|
|000016e0| 61 74 69 6f 6e 50 6f 6c | 69 63 79 0c 41 44 56 41 |ationPol|icy.ADVA|
|000016f0| 50 49 33 32 2e 64 6c 6c | 89 00 4a 88 23 00 00 a0 |PI32.dll|..J.#...|
|00001700| 01 01 0e 4c 73 61 51 75 | 65 72 79 53 65 63 72 65 |...LsaQu|erySecre|
|00001710| 74 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 8a 00 |t.ADVAPI|32.dll..|
|00001720| ef 88 2b 00 00 a0 01 01 | 16 4c 73 61 51 75 65 72 |..+.....|.LsaQuer|
|00001730| 79 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 0c |ySecurit|yObject.|
|00001740| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 8b 00 95 88 |ADVAPI32|.dll....|
|00001750| 33 00 00 a0 01 01 1e 4c | 73 61 52 65 6d 6f 76 65 |3......L|saRemove|
|00001760| 50 72 69 76 69 6c 65 67 | 65 73 46 72 6f 6d 41 63 |Privileg|esFromAc|
|00001770| 63 6f 75 6e 74 0c 41 44 | 56 41 50 49 33 32 2e 64 |count.AD|VAPI32.d|
|00001780| 6c 6c 8c 00 60 88 2c 00 | 00 a0 01 01 17 4c 73 61 |ll..`.,.|.....Lsa|
|00001790| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 6f |SetInfor|mationPo|
|000017a0| 6c 69 63 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |licy.ADV|API32.dl|
|000017b0| 6c 8d 00 34 88 33 00 00 | a0 01 01 1e 4c 73 61 53 |l..4.3..|....LsaS|
|000017c0| 65 74 49 6e 66 6f 72 6d | 61 74 69 6f 6e 54 72 75 |etInform|ationTru|
|000017d0| 73 74 65 64 44 6f 6d 61 | 69 6e 0c 41 44 56 41 50 |stedDoma|in.ADVAP|
|000017e0| 49 33 32 2e 64 6c 6c 8e | 00 52 88 2b 00 00 a0 01 |I32.dll.|.R.+....|
|000017f0| 01 16 4c 73 61 53 65 74 | 51 75 6f 74 61 73 46 6f |..LsaSet|QuotasFo|
|00001800| 72 41 63 63 6f 75 6e 74 | 0c 41 44 56 41 50 49 33 |rAccount|.ADVAPI3|
|00001810| 32 2e 64 6c 6c 8f 00 b9 | 88 21 00 00 a0 01 01 0c |2.dll...|.!......|
|00001820| 4c 73 61 53 65 74 53 65 | 63 72 65 74 0c 41 44 56 |LsaSetSe|cret.ADV|
|00001830| 41 50 49 33 32 2e 64 6c | 6c 90 00 d7 88 29 00 00 |API32.dl|l....)..|
|00001840| a0 01 01 14 4c 73 61 53 | 65 74 53 65 63 75 72 69 |....LsaS|etSecuri|
|00001850| 74 79 4f 62 6a 65 63 74 | 0c 41 44 56 41 50 49 33 |tyObject|.ADVAPI3|
|00001860| 32 2e 64 6c 6c 91 00 7d | 88 2e 00 00 a0 01 01 19 |2.dll..}|........|
|00001870| 4c 73 61 53 65 74 53 79 | 73 74 65 6d 41 63 63 65 |LsaSetSy|stemAcce|
|00001880| 73 73 41 63 63 6f 75 6e | 74 0c 41 44 56 41 50 49 |ssAccoun|t.ADVAPI|
|00001890| 33 32 2e 64 6c 6c 92 00 | 7d 88 23 00 00 a0 01 01 |32.dll..|}.#.....|
|000018a0| 0e 4d 61 6b 65 41 62 73 | 6f 6c 75 74 65 53 44 0c |.MakeAbs|oluteSD.|
|000018b0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 93 00 2e 88 |ADVAPI32|.dll....|
|000018c0| 27 00 00 a0 01 01 12 4d | 61 6b 65 53 65 6c 66 52 |'......M|akeSelfR|
|000018d0| 65 6c 61 74 69 76 65 53 | 44 0c 41 44 56 41 50 49 |elativeS|D.ADVAPI|
|000018e0| 33 32 2e 64 6c 6c 94 00 | 9e 88 23 00 00 a0 01 01 |32.dll..|..#.....|
|000018f0| 0e 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 0c |.MapGene|ricMask.|
|00001900| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 95 00 19 88 |ADVAPI32|.dll....|
|00001910| 2b 00 00 a0 01 01 16 4e | 6f 74 69 66 79 42 6f 6f |+......N|otifyBoo|
|00001920| 74 43 6f 6e 66 69 67 53 | 74 61 74 75 73 0c 41 44 |tConfigS|tatus.AD|
|00001930| 56 41 50 49 33 32 2e 64 | 6c 6c 96 00 88 88 29 00 |VAPI32.d|ll....).|
|00001940| 00 a0 01 01 14 4e 6f 74 | 69 66 79 43 68 61 6e 67 |.....Not|ifyChang|
|00001950| 65 45 76 65 6e 74 4c 6f | 67 0c 41 44 56 41 50 49 |eEventLo|g.ADVAPI|
|00001960| 33 32 2e 64 6c 6c 97 00 | 8f 88 2b 00 00 a0 01 01 |32.dll..|..+.....|
|00001970| 16 4f 62 6a 65 63 74 43 | 6c 6f 73 65 41 75 64 69 |.ObjectC|loseAudi|
|00001980| 74 41 6c 61 72 6d 41 0c | 41 44 56 41 50 49 33 32 |tAlarmA.|ADVAPI32|
|00001990| 2e 64 6c 6c 98 00 fb 88 | 2b 00 00 a0 01 01 16 4f |.dll....|+......O|
|000019a0| 62 6a 65 63 74 43 6c 6f | 73 65 41 75 64 69 74 41 |bjectClo|seAuditA|
|000019b0| 6c 61 72 6d 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |larmW.AD|VAPI32.d|
|000019c0| 6c 6c 99 00 e4 88 2a 00 | 00 a0 01 01 15 4f 62 6a |ll....*.|.....Obj|
|000019d0| 65 63 74 4f 70 65 6e 41 | 75 64 69 74 41 6c 61 72 |ectOpenA|uditAlar|
|000019e0| 6d 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 9a |mA.ADVAP|I32.dll.|
|000019f0| 00 5f 88 2a 00 00 a0 01 | 01 15 4f 62 6a 65 63 74 |._.*....|..Object|
|00001a00| 4f 70 65 6e 41 75 64 69 | 74 41 6c 61 72 6d 57 0c |OpenAudi|tAlarmW.|
|00001a10| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 9b 00 48 88 |ADVAPI32|.dll..H.|
|00001a20| 2f 00 00 a0 01 01 1a 4f | 62 6a 65 63 74 50 72 69 |/......O|bjectPri|
|00001a30| 76 69 6c 65 67 65 41 75 | 64 69 74 41 6c 61 72 6d |vilegeAu|ditAlarm|
|00001a40| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 9c 00 |A.ADVAPI|32.dll..|
|00001a50| 3e 88 2f 00 00 a0 01 01 | 1a 4f 62 6a 65 63 74 50 |>./.....|.ObjectP|
|00001a60| 72 69 76 69 6c 65 67 65 | 41 75 64 69 74 41 6c 61 |rivilege|AuditAla|
|00001a70| 72 6d 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |rmW.ADVA|PI32.dll|
|00001a80| 9d 00 27 88 28 00 00 a0 | 01 01 13 4f 70 65 6e 42 |..'.(...|...OpenB|
|00001a90| 61 63 6b 75 70 45 76 65 | 6e 74 4c 6f 67 41 0c 41 |ackupEve|ntLogA.A|
|00001aa0| 44 56 41 50 49 33 32 2e | 64 6c 6c 9e 00 20 88 28 |DVAPI32.|dll.. .(|
|00001ab0| 00 00 a0 01 01 13 4f 70 | 65 6e 42 61 63 6b 75 70 |......Op|enBackup|
|00001ac0| 45 76 65 6e 74 4c 6f 67 | 57 0c 41 44 56 41 50 49 |EventLog|W.ADVAPI|
|00001ad0| 33 32 2e 64 6c 6c 9f 00 | 09 88 22 00 00 a0 01 01 |32.dll..|..".....|
|00001ae0| 0d 4f 70 65 6e 45 76 65 | 6e 74 4c 6f 67 41 0c 41 |.OpenEve|ntLogA.A|
|00001af0| 44 56 41 50 49 33 32 2e | 64 6c 6c a0 00 80 88 22 |DVAPI32.|dll...."|
|00001b00| 00 00 a0 01 01 0d 4f 70 | 65 6e 45 76 65 6e 74 4c |......Op|enEventL|
|00001b10| 6f 67 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ogW.ADVA|PI32.dll|
|00001b20| a1 00 69 88 25 00 00 a0 | 01 01 10 4f 70 65 6e 50 |..i.%...|...OpenP|
|00001b30| 72 6f 63 65 73 73 54 6f | 6b 65 6e 0c 41 44 56 41 |rocessTo|ken.ADVA|
|00001b40| 50 49 33 32 2e 64 6c 6c | a2 00 fd 88 23 00 00 a0 |PI32.dll|....#...|
|00001b50| 01 01 0e 4f 70 65 6e 53 | 43 4d 61 6e 61 67 65 72 |...OpenS|CManager|
|00001b60| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c a3 00 |A.ADVAPI|32.dll..|
|00001b70| 4e 88 23 00 00 a0 01 01 | 0e 4f 70 65 6e 53 43 4d |N.#.....|.OpenSCM|
|00001b80| 61 6e 61 67 65 72 57 0c | 41 44 56 41 50 49 33 32 |anagerW.|ADVAPI32|
|00001b90| 2e 64 6c 6c a4 00 37 88 | 21 00 00 a0 01 01 0c 4f |.dll..7.|!......O|
|00001ba0| 70 65 6e 53 65 72 76 69 | 63 65 41 0c 41 44 56 41 |penServi|ceA.ADVA|
|00001bb0| 50 49 33 32 2e 64 6c 6c | a5 00 d0 88 21 00 00 a0 |PI32.dll|....!...|
|00001bc0| 01 01 0c 4f 70 65 6e 53 | 65 72 76 69 63 65 57 0c |...OpenS|erviceW.|
|00001bd0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c a6 00 b9 88 |ADVAPI32|.dll....|
|00001be0| 24 00 00 a0 01 01 0f 4f | 70 65 6e 54 68 72 65 61 |$......O|penThrea|
|00001bf0| 64 54 6f 6b 65 6e 0c 41 | 44 56 41 50 49 33 32 2e |dToken.A|DVAPI32.|
|00001c00| 64 6c 6c a7 00 81 88 23 | 00 00 a0 01 01 0e 50 72 |dll....#|......Pr|
|00001c10| 69 76 69 6c 65 67 65 43 | 68 65 63 6b 0c 41 44 56 |ivilegeC|heck.ADV|
|00001c20| 41 50 49 33 32 2e 64 6c | 6c a8 00 e8 88 31 00 00 |API32.dl|l....1..|
|00001c30| a0 01 01 1c 50 72 69 76 | 69 6c 65 67 65 64 53 65 |....Priv|ilegedSe|
|00001c40| 72 76 69 63 65 41 75 64 | 69 74 41 6c 61 72 6d 41 |rviceAud|itAlarmA|
|00001c50| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c a9 00 4f |.ADVAPI3|2.dll..O|
|00001c60| 88 31 00 00 a0 01 01 1c | 50 72 69 76 69 6c 65 67 |.1......|Privileg|
|00001c70| 65 64 53 65 72 76 69 63 | 65 41 75 64 69 74 41 6c |edServic|eAuditAl|
|00001c80| 61 72 6d 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |armW.ADV|API32.dl|
|00001c90| 6c aa 00 38 88 28 00 00 | a0 01 01 13 51 75 65 72 |l..8.(..|....Quer|
|00001ca0| 79 53 65 72 76 69 63 65 | 43 6f 6e 66 69 67 41 0c |yService|ConfigA.|
|00001cb0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c ab 00 e2 88 |ADVAPI32|.dll....|
|00001cc0| 28 00 00 a0 01 01 13 51 | 75 65 72 79 53 65 72 76 |(......Q|ueryServ|
|00001cd0| 69 63 65 43 6f 6e 66 69 | 67 57 0c 41 44 56 41 50 |iceConfi|gW.ADVAP|
|00001ce0| 49 33 32 2e 64 6c 6c ac | 00 cb 88 2c 00 00 a0 01 |I32.dll.|...,....|
|00001cf0| 01 17 51 75 65 72 79 53 | 65 72 76 69 63 65 4c 6f |..QueryS|erviceLo|
|00001d00| 63 6b 53 74 61 74 75 73 | 41 0c 41 44 56 41 50 49 |ckStatus|A.ADVAPI|
|00001d10| 33 32 2e 64 6c 6c ad 00 | 21 88 2c 00 00 a0 01 01 |32.dll..|!.,.....|
|00001d20| 17 51 75 65 72 79 53 65 | 72 76 69 63 65 4c 6f 63 |.QuerySe|rviceLoc|
|00001d30| 6b 53 74 61 74 75 73 57 | 0c 41 44 56 41 50 49 33 |kStatusW|.ADVAPI3|
|00001d40| 32 2e 64 6c 6c ae 00 0a | 88 2f 00 00 a0 01 01 1a |2.dll...|./......|
|00001d50| 51 75 65 72 79 53 65 72 | 76 69 63 65 4f 62 6a 65 |QuerySer|viceObje|
|00001d60| 63 74 53 65 63 75 72 69 | 74 79 0c 41 44 56 41 50 |ctSecuri|ty.ADVAP|
|00001d70| 49 33 32 2e 64 6c 6c af | 00 b8 88 27 00 00 a0 01 |I32.dll.|...'....|
|00001d80| 01 12 51 75 65 72 79 53 | 65 72 76 69 63 65 53 74 |..QueryS|erviceSt|
|00001d90| 61 74 75 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |atus.ADV|API32.dl|
|00001da0| 6c b0 00 f2 88 31 00 00 | a0 01 01 1c 51 75 65 72 |l....1..|....Quer|
|00001db0| 79 57 69 6e 64 6f 77 73 | 33 31 46 69 6c 65 73 4d |yWindows|31FilesM|
|00001dc0| 69 67 72 61 74 69 6f 6e | 0c 41 44 56 41 50 49 33 |igration|.ADVAPI3|
|00001dd0| 32 2e 64 6c 6c b1 00 46 | 88 22 00 00 a0 01 01 0d |2.dll..F|."......|
|00001de0| 52 65 61 64 45 76 65 6e | 74 4c 6f 67 41 0c 41 44 |ReadEven|tLogA.AD|
|00001df0| 56 41 50 49 33 32 2e 64 | 6c 6c b2 00 84 88 22 00 |VAPI32.d|ll....".|
|00001e00| 00 a0 01 01 0d 52 65 61 | 64 45 76 65 6e 74 4c 6f |.....Rea|dEventLo|
|00001e10| 67 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c b3 |gW.ADVAP|I32.dll.|
|00001e20| 00 6d 88 20 00 00 a0 01 | 01 0b 52 65 67 43 6c 6f |.m. ....|..RegClo|
|00001e30| 73 65 4b 65 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |seKey.AD|VAPI32.d|
|00001e40| 6c 6c b4 00 2a 88 28 00 | 00 a0 01 01 13 52 65 67 |ll..*.(.|.....Reg|
|00001e50| 43 6f 6e 6e 65 63 74 52 | 65 67 69 73 74 72 79 41 |ConnectR|egistryA|
|00001e60| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c b5 00 d4 |.ADVAPI3|2.dll...|
|00001e70| 88 28 00 00 a0 01 01 13 | 52 65 67 43 6f 6e 6e 65 |.(......|RegConne|
|00001e80| 63 74 52 65 67 69 73 74 | 72 79 57 0c 41 44 56 41 |ctRegist|ryW.ADVA|
|00001e90| 50 49 33 32 2e 64 6c 6c | b6 00 bd 88 22 00 00 a0 |PI32.dll|...."...|
|00001ea0| 01 01 0d 52 65 67 43 72 | 65 61 74 65 4b 65 79 41 |...RegCr|eateKeyA|
|00001eb0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c b7 00 84 |.ADVAPI3|2.dll...|
|00001ec0| 88 24 00 00 a0 01 01 0f | 52 65 67 43 72 65 61 74 |.$......|RegCreat|
|00001ed0| 65 4b 65 79 45 78 41 0c | 41 44 56 41 50 49 33 32 |eKeyExA.|ADVAPI32|
|00001ee0| 2e 64 6c 6c b8 00 c2 88 | 24 00 00 a0 01 01 0f 52 |.dll....|$......R|
|00001ef0| 65 67 43 72 65 61 74 65 | 4b 65 79 45 78 57 0c 41 |egCreate|KeyExW.A|
|00001f00| 44 56 41 50 49 33 32 2e | 64 6c 6c b9 00 ab 88 22 |DVAPI32.|dll...."|
|00001f10| 00 00 a0 01 01 0d 52 65 | 67 43 72 65 61 74 65 4b |......Re|gCreateK|
|00001f20| 65 79 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |eyW.ADVA|PI32.dll|
|00001f30| ba 00 6b 88 22 00 00 a0 | 01 01 0d 52 65 67 44 65 |..k."...|...RegDe|
|00001f40| 6c 65 74 65 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |leteKeyA|.ADVAPI3|
|00001f50| 32 2e 64 6c 6c bb 00 81 | 88 22 00 00 a0 01 01 0d |2.dll...|."......|
|00001f60| 52 65 67 44 65 6c 65 74 | 65 4b 65 79 57 0c 41 44 |RegDelet|eKeyW.AD|
|00001f70| 56 41 50 49 33 32 2e 64 | 6c 6c bc 00 6a 88 24 00 |VAPI32.d|ll..j.$.|
|00001f80| 00 a0 01 01 0f 52 65 67 | 44 65 6c 65 74 65 56 61 |.....Reg|DeleteVa|
|00001f90| 6c 75 65 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |lueA.ADV|API32.dl|
|00001fa0| 6c bd 00 a7 88 24 00 00 | a0 01 01 0f 52 65 67 44 |l....$..|....RegD|
|00001fb0| 65 6c 65 74 65 56 61 6c | 75 65 57 0c 41 44 56 41 |eleteVal|ueW.ADVA|
|00001fc0| 50 49 33 32 2e 64 6c 6c | be 00 90 88 20 00 00 a0 |PI32.dll|.... ...|
|00001fd0| 01 01 0b 52 65 67 45 6e | 75 6d 4b 65 79 41 0c 41 |...RegEn|umKeyA.A|
|00001fe0| 44 56 41 50 49 33 32 2e | 64 6c 6c bf 00 3f 88 22 |DVAPI32.|dll..?."|
|00001ff0| 00 00 a0 01 01 0d 52 65 | 67 45 6e 75 6d 4b 65 79 |......Re|gEnumKey|
|00002000| 45 78 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ExA.ADVA|PI32.dll|
|00002010| c0 00 7d 88 22 00 00 a0 | 01 01 0d 52 65 67 45 6e |..}."...|...RegEn|
|00002020| 75 6d 4b 65 79 45 78 57 | 0c 41 44 56 41 50 49 33 |umKeyExW|.ADVAPI3|
|00002030| 32 2e 64 6c 6c c1 00 66 | 88 20 00 00 a0 01 01 0b |2.dll..f|. ......|
|00002040| 52 65 67 45 6e 75 6d 4b | 65 79 57 0c 41 44 56 41 |RegEnumK|eyW.ADVA|
|00002050| 50 49 33 32 2e 64 6c 6c | c2 00 26 88 22 00 00 a0 |PI32.dll|..&."...|
|00002060| 01 01 0d 52 65 67 45 6e | 75 6d 56 61 6c 75 65 41 |...RegEn|umValueA|
|00002070| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c c3 00 63 |.ADVAPI3|2.dll..c|
|00002080| 88 22 00 00 a0 01 01 0d | 52 65 67 45 6e 75 6d 56 |."......|RegEnumV|
|00002090| 61 6c 75 65 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |alueW.AD|VAPI32.d|
|000020a0| 6c 6c c4 00 4c 88 20 00 | 00 a0 01 01 0b 52 65 67 |ll..L. .|.....Reg|
|000020b0| 46 6c 75 73 68 4b 65 79 | 0c 41 44 56 41 50 49 33 |FlushKey|.ADVAPI3|
|000020c0| 32 2e 64 6c 6c c5 00 0d | 88 26 00 00 a0 01 01 11 |2.dll...|.&......|
|000020d0| 52 65 67 47 65 74 4b 65 | 79 53 65 63 75 72 69 74 |RegGetKe|ySecurit|
|000020e0| 79 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c c6 00 |y.ADVAPI|32.dll..|
|000020f0| 8a 88 20 00 00 a0 01 01 | 0b 52 65 67 4c 6f 61 64 |.. .....|.RegLoad|
|00002100| 4b 65 79 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyA.ADV|API32.dl|
|00002110| 6c c7 00 4c 88 20 00 00 | a0 01 01 0b 52 65 67 4c |l..L. ..|....RegL|
|00002120| 6f 61 64 4b 65 79 57 0c | 41 44 56 41 50 49 33 32 |oadKeyW.|ADVAPI32|
|00002130| 2e 64 6c 6c c8 00 35 88 | 2c 00 00 a0 01 01 17 52 |.dll..5.|,......R|
|00002140| 65 67 4e 6f 74 69 66 79 | 43 68 61 6e 67 65 4b 65 |egNotify|ChangeKe|
|00002150| 79 56 61 6c 75 65 0c 41 | 44 56 41 50 49 33 32 2e |yValue.A|DVAPI32.|
|00002160| 64 6c 6c c9 00 37 88 20 | 00 00 a0 01 01 0b 52 65 |dll..7. |......Re|
|00002170| 67 4f 70 65 6e 4b 65 79 | 41 0c 41 44 56 41 50 49 |gOpenKey|A.ADVAPI|
|00002180| 33 32 2e 64 6c 6c ca 00 | 37 88 22 00 00 a0 01 01 |32.dll..|7.".....|
|00002190| 0d 52 65 67 4f 70 65 6e | 4b 65 79 45 78 41 0c 41 |.RegOpen|KeyExA.A|
|000021a0| 44 56 41 50 49 33 32 2e | 64 6c 6c cb 00 75 88 22 |DVAPI32.|dll..u."|
|000021b0| 00 00 a0 01 01 0d 52 65 | 67 4f 70 65 6e 4b 65 79 |......Re|gOpenKey|
|000021c0| 45 78 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ExW.ADVA|PI32.dll|
|000021d0| cc 00 5e 88 20 00 00 a0 | 01 01 0b 52 65 67 4f 70 |..^. ...|...RegOp|
|000021e0| 65 6e 4b 65 79 57 0c 41 | 44 56 41 50 49 33 32 2e |enKeyW.A|DVAPI32.|
|000021f0| 64 6c 6c cd 00 1e 88 25 | 00 00 a0 01 01 10 52 65 |dll....%|......Re|
|00002200| 67 51 75 65 72 79 49 6e | 66 6f 4b 65 79 41 0c 41 |gQueryIn|foKeyA.A|
|00002210| 44 56 41 50 49 33 32 2e | 64 6c 6c ce 00 19 88 25 |DVAPI32.|dll....%|
|00002220| 00 00 a0 01 01 10 52 65 | 67 51 75 65 72 79 49 6e |......Re|gQueryIn|
|00002230| 66 6f 4b 65 79 57 0c 41 | 44 56 41 50 49 33 32 2e |foKeyW.A|DVAPI32.|
|00002240| 64 6c 6c cf 00 02 88 23 | 00 00 a0 01 01 0e 52 65 |dll....#|......Re|
|00002250| 67 51 75 65 72 79 56 61 | 6c 75 65 41 0c 41 44 56 |gQueryVa|lueA.ADV|
|00002260| 41 50 49 33 32 2e 64 6c | 6c d0 00 d3 88 25 00 00 |API32.dl|l....%..|
|00002270| a0 01 01 10 52 65 67 51 | 75 65 72 79 56 61 6c 75 |....RegQ|ueryValu|
|00002280| 65 45 78 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |eExA.ADV|API32.dl|
|00002290| 6c d1 00 11 88 25 00 00 | a0 01 01 10 52 65 67 51 |l....%..|....RegQ|
|000022a0| 75 65 72 79 56 61 6c 75 | 65 45 78 57 0c 41 44 56 |ueryValu|eExW.ADV|
|000022b0| 41 50 49 33 32 2e 64 6c | 6c d2 00 fa 88 23 00 00 |API32.dl|l....#..|
|000022c0| a0 01 01 0e 52 65 67 51 | 75 65 72 79 56 61 6c 75 |....RegQ|ueryValu|
|000022d0| 65 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c d3 |eW.ADVAP|I32.dll.|
|000022e0| 00 ba 88 23 00 00 a0 01 | 01 0e 52 65 67 52 65 70 |...#....|..RegRep|
|000022f0| 6c 61 63 65 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |laceKeyA|.ADVAPI3|
|00002300| 32 2e 64 6c 6c d4 00 fd | 88 23 00 00 a0 01 01 0e |2.dll...|.#......|
|00002310| 52 65 67 52 65 70 6c 61 | 63 65 4b 65 79 57 0c 41 |RegRepla|ceKeyW.A|
|00002320| 44 56 41 50 49 33 32 2e | 64 6c 6c d5 00 e6 88 23 |DVAPI32.|dll....#|
|00002330| 00 00 a0 01 01 0e 52 65 | 67 52 65 73 74 6f 72 65 |......Re|gRestore|
|00002340| 4b 65 79 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyA.ADV|API32.dl|
|00002350| 6c d6 00 d3 88 23 00 00 | a0 01 01 0e 52 65 67 52 |l....#..|....RegR|
|00002360| 65 73 74 6f 72 65 4b 65 | 79 57 0c 41 44 56 41 50 |estoreKe|yW.ADVAP|
|00002370| 49 33 32 2e 64 6c 6c d7 | 00 bc 88 20 00 00 a0 01 |I32.dll.|... ....|
|00002380| 01 0b 52 65 67 53 61 76 | 65 4b 65 79 41 0c 41 44 |..RegSav|eKeyA.AD|
|00002390| 56 41 50 49 33 32 2e 64 | 6c 6c d8 00 2c 88 20 00 |VAPI32.d|ll..,. .|
|000023a0| 00 a0 01 01 0b 52 65 67 | 53 61 76 65 4b 65 79 57 |.....Reg|SaveKeyW|
|000023b0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c d9 00 15 |.ADVAPI3|2.dll...|
|000023c0| 88 26 00 00 a0 01 01 11 | 52 65 67 53 65 74 4b 65 |.&......|RegSetKe|
|000023d0| 79 53 65 63 75 72 69 74 | 79 0c 41 44 56 41 50 49 |ySecurit|y.ADVAPI|
|000023e0| 33 32 2e 64 6c 6c da 00 | 6a 88 21 00 00 a0 01 01 |32.dll..|j.!.....|
|000023f0| 0c 52 65 67 53 65 74 56 | 61 6c 75 65 41 0c 41 44 |.RegSetV|alueA.AD|
|00002400| 56 41 50 49 33 32 2e 64 | 6c 6c db 00 b6 88 23 00 |VAPI32.d|ll....#.|
|00002410| 00 a0 01 01 0e 52 65 67 | 53 65 74 56 61 6c 75 65 |.....Reg|SetValue|
|00002420| 45 78 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ExA.ADVA|PI32.dll|
|00002430| dc 00 f4 88 23 00 00 a0 | 01 01 0e 52 65 67 53 65 |....#...|...RegSe|
|00002440| 74 56 61 6c 75 65 45 78 | 57 0c 41 44 56 41 50 49 |tValueEx|W.ADVAPI|
|00002450| 33 32 2e 64 6c 6c dd 00 | dd 88 21 00 00 a0 01 01 |32.dll..|..!.....|
|00002460| 0c 52 65 67 53 65 74 56 | 61 6c 75 65 57 0c 41 44 |.RegSetV|alueW.AD|
|00002470| 56 41 50 49 33 32 2e 64 | 6c 6c de 00 9d 88 22 00 |VAPI32.d|ll....".|
|00002480| 00 a0 01 01 0d 52 65 67 | 55 6e 4c 6f 61 64 4b 65 |.....Reg|UnLoadKe|
|00002490| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c df |yA.ADVAP|I32.dll.|
|000024a0| 00 6d 88 22 00 00 a0 01 | 01 0d 52 65 67 55 6e 4c |.m."....|..RegUnL|
|000024b0| 6f 61 64 4b 65 79 57 0c | 41 44 56 41 50 49 33 32 |oadKeyW.|ADVAPI32|
|000024c0| 2e 64 6c 6c e0 00 56 88 | 29 00 00 a0 01 01 14 52 |.dll..V.|)......R|
|000024d0| 65 67 69 73 74 65 72 45 | 76 65 6e 74 53 6f 75 72 |egisterE|ventSour|
|000024e0| 63 65 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ceA.ADVA|PI32.dll|
|000024f0| e1 00 2f 88 29 00 00 a0 | 01 01 14 52 65 67 69 73 |../.)...|...Regis|
|00002500| 74 65 72 45 76 65 6e 74 | 53 6f 75 72 63 65 57 0c |terEvent|SourceW.|
|00002510| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c e2 00 18 88 |ADVAPI32|.dll....|
|00002520| 30 00 00 a0 01 01 1b 52 | 65 67 69 73 74 65 72 53 |0......R|egisterS|
|00002530| 65 72 76 69 63 65 43 74 | 72 6c 48 61 6e 64 6c 65 |erviceCt|rlHandle|
|00002540| 72 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c e3 |rA.ADVAP|I32.dll.|
|00002550| 00 6e 88 30 00 00 a0 01 | 01 1b 52 65 67 69 73 74 |.n.0....|..Regist|
|00002560| 65 72 53 65 72 76 69 63 | 65 43 74 72 6c 48 61 6e |erServic|eCtrlHan|
|00002570| 64 6c 65 72 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |dlerW.AD|VAPI32.d|
|00002580| 6c 6c e4 00 57 88 21 00 | 00 a0 01 01 0c 52 65 70 |ll..W.!.|.....Rep|
|00002590| 6f 72 74 45 76 65 6e 74 | 41 0c 41 44 56 41 50 49 |ortEvent|A.ADVAPI|
|000025a0| 33 32 2e 64 6c 6c e5 00 | 75 88 21 00 00 a0 01 01 |32.dll..|u.!.....|
|000025b0| 0c 52 65 70 6f 72 74 45 | 76 65 6e 74 57 0c 41 44 |.ReportE|ventW.AD|
|000025c0| 56 41 50 49 33 32 2e 64 | 6c 6c e6 00 5e 88 21 00 |VAPI32.d|ll..^.!.|
|000025d0| 00 a0 01 01 0c 52 65 76 | 65 72 74 54 6f 53 65 6c |.....Rev|ertToSel|
|000025e0| 66 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c e7 00 |f.ADVAPI|32.dll..|
|000025f0| 6d 88 26 00 00 a0 01 01 | 11 53 65 74 41 63 6c 49 |m.&.....|.SetAclI|
|00002600| 6e 66 6f 72 6d 61 74 69 | 6f 6e 0c 41 44 56 41 50 |nformati|on.ADVAP|
|00002610| 49 33 32 2e 64 6c 6c e8 | 00 65 88 25 00 00 a0 01 |I32.dll.|.e.%....|
|00002620| 01 10 53 65 74 46 69 6c | 65 53 65 63 75 72 69 74 |..SetFil|eSecurit|
|00002630| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c e9 |yA.ADVAP|I32.dll.|
|00002640| 00 e3 88 25 00 00 a0 01 | 01 10 53 65 74 46 69 6c |...%....|..SetFil|
|00002650| 65 53 65 63 75 72 69 74 | 79 57 0c 41 44 56 41 50 |eSecurit|yW.ADVAP|
|00002660| 49 33 32 2e 64 6c 6c ea | 00 cc 88 2c 00 00 a0 01 |I32.dll.|...,....|
|00002670| 01 17 53 65 74 4b 65 72 | 6e 65 6c 4f 62 6a 65 63 |..SetKer|nelObjec|
|00002680| 74 53 65 63 75 72 69 74 | 79 0c 41 44 56 41 50 49 |tSecurit|y.ADVAPI|
|00002690| 33 32 2e 64 6c 6c eb 00 | dc 88 2d 00 00 a0 01 01 |32.dll..|..-.....|
|000026a0| 18 53 65 74 50 72 69 76 | 61 74 65 4f 62 6a 65 63 |.SetPriv|ateObjec|
|000026b0| 74 53 65 63 75 72 69 74 | 79 0c 41 44 56 41 50 49 |tSecurit|y.ADVAPI|
|000026c0| 33 32 2e 64 6c 6c ec 00 | 5f 88 2e 00 00 a0 01 01 |32.dll..|_.......|
|000026d0| 19 53 65 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |.SetSecu|rityDesc|
|000026e0| 72 69 70 74 6f 72 44 61 | 63 6c 0c 41 44 56 41 50 |riptorDa|cl.ADVAP|
|000026f0| 49 33 32 2e 64 6c 6c ed | 00 fb 88 2f 00 00 a0 01 |I32.dll.|.../....|
|00002700| 01 1a 53 65 74 53 65 63 | 75 72 69 74 79 44 65 73 |..SetSec|urityDes|
|00002710| 63 72 69 70 74 6f 72 47 | 72 6f 75 70 0c 41 44 56 |criptorG|roup.ADV|
|00002720| 41 50 49 33 32 2e 64 6c | 6c ee 00 5f 88 2f 00 00 |API32.dl|l.._./..|
|00002730| a0 01 01 1a 53 65 74 53 | 65 63 75 72 69 74 79 44 |....SetS|ecurityD|
|00002740| 65 73 63 72 69 70 74 6f | 72 4f 77 6e 65 72 0c 41 |escripto|rOwner.A|
|00002750| 44 56 41 50 49 33 32 2e | 64 6c 6c ef 00 60 88 2e |DVAPI32.|dll..`..|
|00002760| 00 00 a0 01 01 19 53 65 | 74 53 65 63 75 72 69 74 |......Se|tSecurit|
|00002770| 79 44 65 73 63 72 69 70 | 74 6f 72 53 61 63 6c 0c |yDescrip|torSacl.|
|00002780| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c f0 00 e9 88 |ADVAPI32|.dll....|
|00002790| 23 00 00 a0 01 01 0e 53 | 65 74 53 65 72 76 69 63 |#......S|etServic|
|000027a0| 65 42 69 74 73 0c 41 44 | 56 41 50 49 33 32 2e 64 |eBits.AD|VAPI32.d|
|000027b0| 6c 6c f1 00 95 88 2d 00 | 00 a0 01 01 18 53 65 74 |ll....-.|.....Set|
|000027c0| 53 65 72 76 69 63 65 4f | 62 6a 65 63 74 53 65 63 |ServiceO|bjectSec|
|000027d0| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |urity.AD|VAPI32.d|
|000027e0| 6c 6c f2 00 63 88 25 00 | 00 a0 01 01 10 53 65 74 |ll..c.%.|.....Set|
|000027f0| 53 65 72 76 69 63 65 53 | 74 61 74 75 73 0c 41 44 |ServiceS|tatus.AD|
|00002800| 56 41 50 49 33 32 2e 64 | 6c 6c f3 00 9d 88 23 00 |VAPI32.d|ll....#.|
|00002810| 00 a0 01 01 0e 53 65 74 | 54 68 72 65 61 64 54 6f |.....Set|ThreadTo|
|00002820| 6b 65 6e 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ken.ADVA|PI32.dll|
|00002830| f4 00 9c 88 28 00 00 a0 | 01 01 13 53 65 74 54 6f |....(...|...SetTo|
|00002840| 6b 65 6e 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 0c 41 |kenInfor|mation.A|
|00002850| 44 56 41 50 49 33 32 2e | 64 6c 6c f5 00 63 88 22 |DVAPI32.|dll..c."|
|00002860| 00 00 a0 01 01 0d 53 74 | 61 72 74 53 65 72 76 69 |......St|artServi|
|00002870| 63 65 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ceA.ADVA|PI32.dll|
|00002880| f6 00 01 88 30 00 00 a0 | 01 01 1b 53 74 61 72 74 |....0...|...Start|
|00002890| 53 65 72 76 69 63 65 43 | 74 72 6c 44 69 73 70 61 |ServiceC|trlDispa|
|000028a0| 74 63 68 65 72 41 0c 41 | 44 56 41 50 49 33 32 2e |tcherA.A|DVAPI32.|
|000028b0| 64 6c 6c f7 00 48 88 30 | 00 00 a0 01 01 1b 53 74 |dll..H.0|......St|
|000028c0| 61 72 74 53 65 72 76 69 | 63 65 43 74 72 6c 44 69 |artServi|ceCtrlDi|
|000028d0| 73 70 61 74 63 68 65 72 | 57 0c 41 44 56 41 50 49 |spatcher|W.ADVAPI|
|000028e0| 33 32 2e 64 6c 6c f8 00 | 31 88 22 00 00 a0 01 01 |32.dll..|1.".....|
|000028f0| 0d 53 74 61 72 74 53 65 | 72 76 69 63 65 57 0c 41 |.StartSe|rviceW.A|
|00002900| 44 56 41 50 49 33 32 2e | 64 6c 6c f9 00 e8 88 42 |DVAPI32.|dll....B|
|00002910| 00 00 a0 01 01 2d 53 79 | 6e 63 68 72 6f 6e 69 7a |.....-Sy|nchroniz|
|00002920| 65 57 69 6e 64 6f 77 73 | 33 31 46 69 6c 65 73 41 |eWindows|31FilesA|
|00002930| 6e 64 57 69 6e 64 6f 77 | 73 4e 54 52 65 67 69 73 |ndWindow|sNTRegis|
|00002940| 74 72 79 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |try.ADVA|PI32.dll|
|00002950| fa 00 06 88 26 00 00 a0 | 01 01 11 53 79 73 74 65 |....&...|...Syste|
|00002960| 6d 46 75 6e 63 74 69 6f | 6e 30 30 31 0c 41 44 56 |mFunctio|n001.ADV|
|00002970| 41 50 49 33 32 2e 64 6c | 6c fb 00 b8 88 26 00 00 |API32.dl|l....&..|
|00002980| a0 01 01 11 53 79 73 74 | 65 6d 46 75 6e 63 74 69 |....Syst|emFuncti|
|00002990| 6f 6e 30 30 32 0c 41 44 | 56 41 50 49 33 32 2e 64 |on002.AD|VAPI32.d|
|000029a0| 6c 6c fc 00 b6 88 26 00 | 00 a0 01 01 11 53 79 73 |ll....&.|.....Sys|
|000029b0| 74 65 6d 46 75 6e 63 74 | 69 6f 6e 30 30 33 0c 41 |temFunct|ion003.A|
|000029c0| 44 56 41 50 49 33 32 2e | 64 6c 6c fd 00 b4 88 26 |DVAPI32.|dll....&|
|000029d0| 00 00 a0 01 01 11 53 79 | 73 74 65 6d 46 75 6e 63 |......Sy|stemFunc|
|000029e0| 74 69 6f 6e 30 30 34 0c | 41 44 56 41 50 49 33 32 |tion004.|ADVAPI32|
|000029f0| 2e 64 6c 6c fe 00 b2 88 | 26 00 00 a0 01 01 11 53 |.dll....|&......S|
|00002a00| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 35 |ystemFun|ction005|
|00002a10| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c ff 00 b0 |.ADVAPI3|2.dll...|
|00002a20| 88 26 00 00 a0 01 01 11 | 53 79 73 74 65 6d 46 75 |.&......|SystemFu|
|00002a30| 6e 63 74 69 6f 6e 30 30 | 36 0c 41 44 56 41 50 49 |nction00|6.ADVAPI|
|00002a40| 33 32 2e 64 6c 6c 00 01 | ad 88 26 00 00 a0 01 01 |32.dll..|..&.....|
|00002a50| 11 53 79 73 74 65 6d 46 | 75 6e 63 74 69 6f 6e 30 |.SystemF|unction0|
|00002a60| 30 37 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 01 |07.ADVAP|I32.dll.|
|00002a70| 01 ab 88 26 00 00 a0 01 | 01 11 53 79 73 74 65 6d |...&....|..System|
|00002a80| 46 75 6e 63 74 69 6f 6e | 30 30 38 0c 41 44 56 41 |Function|008.ADVA|
|00002a90| 50 49 33 32 2e 64 6c 6c | 02 01 a9 88 26 00 00 a0 |PI32.dll|....&...|
|00002aa0| 01 01 11 53 79 73 74 65 | 6d 46 75 6e 63 74 69 6f |...Syste|mFunctio|
|00002ab0| 6e 30 30 39 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |n009.ADV|API32.dl|
|00002ac0| 6c 03 01 a7 88 26 00 00 | a0 01 01 11 53 79 73 74 |l....&..|....Syst|
|00002ad0| 65 6d 46 75 6e 63 74 69 | 6f 6e 30 31 30 0c 41 44 |emFuncti|on010.AD|
|00002ae0| 56 41 50 49 33 32 2e 64 | 6c 6c 04 01 ae 88 26 00 |VAPI32.d|ll....&.|
|00002af0| 00 a0 01 01 11 53 79 73 | 74 65 6d 46 75 6e 63 74 |.....Sys|temFunct|
|00002b00| 69 6f 6e 30 31 31 0c 41 | 44 56 41 50 49 33 32 2e |ion011.A|DVAPI32.|
|00002b10| 64 6c 6c 05 01 ac 88 26 | 00 00 a0 01 01 11 53 79 |dll....&|......Sy|
|00002b20| 73 74 65 6d 46 75 6e 63 | 74 69 6f 6e 30 31 32 0c |stemFunc|tion012.|
|00002b30| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 06 01 aa 88 |ADVAPI32|.dll....|
|00002b40| 26 00 00 a0 01 01 11 53 | 79 73 74 65 6d 46 75 6e |&......S|ystemFun|
|00002b50| 63 74 69 6f 6e 30 31 33 | 0c 41 44 56 41 50 49 33 |ction013|.ADVAPI3|
|00002b60| 32 2e 64 6c 6c 07 01 a8 | 88 26 00 00 a0 01 01 11 |2.dll...|.&......|
|00002b70| 53 79 73 74 65 6d 46 75 | 6e 63 74 69 6f 6e 30 31 |SystemFu|nction01|
|00002b80| 34 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 08 01 |4.ADVAPI|32.dll..|
|00002b90| a6 88 26 00 00 a0 01 01 | 11 53 79 73 74 65 6d 46 |..&.....|.SystemF|
|00002ba0| 75 6e 63 74 69 6f 6e 30 | 31 35 0c 41 44 56 41 50 |unction0|15.ADVAP|
|00002bb0| 49 33 32 2e 64 6c 6c 09 | 01 a4 88 26 00 00 a0 01 |I32.dll.|...&....|
|00002bc0| 01 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00002bd0| 30 31 36 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |016.ADVA|PI32.dll|
|00002be0| 0a 01 a2 88 26 00 00 a0 | 01 01 11 53 79 73 74 65 |....&...|...Syste|
|00002bf0| 6d 46 75 6e 63 74 69 6f | 6e 30 31 37 0c 41 44 56 |mFunctio|n017.ADV|
|00002c00| 41 50 49 33 32 2e 64 6c | 6c 0b 01 a0 88 26 00 00 |API32.dl|l....&..|
|00002c10| a0 01 01 11 53 79 73 74 | 65 6d 46 75 6e 63 74 69 |....Syst|emFuncti|
|00002c20| 6f 6e 30 31 38 0c 41 44 | 56 41 50 49 33 32 2e 64 |on018.AD|VAPI32.d|
|00002c30| 6c 6c 0c 01 9e 88 26 00 | 00 a0 01 01 11 53 79 73 |ll....&.|.....Sys|
|00002c40| 74 65 6d 46 75 6e 63 74 | 69 6f 6e 30 31 39 0c 41 |temFunct|ion019.A|
|00002c50| 44 56 41 50 49 33 32 2e | 64 6c 6c 0d 01 9c 88 26 |DVAPI32.|dll....&|
|00002c60| 00 00 a0 01 01 11 53 79 | 73 74 65 6d 46 75 6e 63 |......Sy|stemFunc|
|00002c70| 74 69 6f 6e 30 32 30 0c | 41 44 56 41 50 49 33 32 |tion020.|ADVAPI32|
|00002c80| 2e 64 6c 6c 0e 01 a3 88 | 26 00 00 a0 01 01 11 53 |.dll....|&......S|
|00002c90| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 31 |ystemFun|ction021|
|00002ca0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 0f 01 a1 |.ADVAPI3|2.dll...|
|00002cb0| 88 26 00 00 a0 01 01 11 | 53 79 73 74 65 6d 46 75 |.&......|SystemFu|
|00002cc0| 6e 63 74 69 6f 6e 30 32 | 32 0c 41 44 56 41 50 49 |nction02|2.ADVAPI|
|00002cd0| 33 32 2e 64 6c 6c 10 01 | 9f 88 26 00 00 a0 01 01 |32.dll..|..&.....|
|00002ce0| 11 53 79 73 74 65 6d 46 | 75 6e 63 74 69 6f 6e 30 |.SystemF|unction0|
|00002cf0| 32 33 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 11 |23.ADVAP|I32.dll.|
|00002d00| 01 9d 88 26 00 00 a0 01 | 01 11 53 79 73 74 65 6d |...&....|..System|
|00002d10| 46 75 6e 63 74 69 6f 6e | 30 32 34 0c 41 44 56 41 |Function|024.ADVA|
|00002d20| 50 49 33 32 2e 64 6c 6c | 12 01 9b 88 26 00 00 a0 |PI32.dll|....&...|
|00002d30| 01 01 11 53 79 73 74 65 | 6d 46 75 6e 63 74 69 6f |...Syste|mFunctio|
|00002d40| 6e 30 32 35 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |n025.ADV|API32.dl|
|00002d50| 6c 13 01 99 88 26 00 00 | a0 01 01 11 53 79 73 74 |l....&..|....Syst|
|00002d60| 65 6d 46 75 6e 63 74 69 | 6f 6e 30 32 36 0c 41 44 |emFuncti|on026.AD|
|00002d70| 56 41 50 49 33 32 2e 64 | 6c 6c 14 01 97 88 26 00 |VAPI32.d|ll....&.|
|00002d80| 00 a0 01 01 11 53 79 73 | 74 65 6d 46 75 6e 63 74 |.....Sys|temFunct|
|00002d90| 69 6f 6e 30 32 37 0c 41 | 44 56 41 50 49 33 32 2e |ion027.A|DVAPI32.|
|00002da0| 64 6c 6c 15 01 95 88 26 | 00 00 a0 01 01 11 53 79 |dll....&|......Sy|
|00002db0| 73 74 65 6d 46 75 6e 63 | 74 69 6f 6e 30 32 38 0c |stemFunc|tion028.|
|00002dc0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 16 01 93 88 |ADVAPI32|.dll....|
|00002dd0| 26 00 00 a0 01 01 11 53 | 79 73 74 65 6d 46 75 6e |&......S|ystemFun|
|00002de0| 63 74 69 6f 6e 30 32 39 | 0c 41 44 56 41 50 49 33 |ction029|.ADVAPI3|
|00002df0| 32 2e 64 6c 6c 17 01 91 | 88 26 00 00 a0 01 01 11 |2.dll...|.&......|
|00002e00| 53 79 73 74 65 6d 46 75 | 6e 63 74 69 6f 6e 30 33 |SystemFu|nction03|
|00002e10| 30 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 18 01 |0.ADVAPI|32.dll..|
|00002e20| 98 88 26 00 00 a0 01 01 | 11 53 79 73 74 65 6d 46 |..&.....|.SystemF|
|00002e30| 75 6e 63 74 69 6f 6e 30 | 33 31 0c 41 44 56 41 50 |unction0|31.ADVAP|
|00002e40| 49 33 32 2e 64 6c 6c 19 | 01 96 88 26 00 00 a0 01 |I32.dll.|...&....|
|00002e50| 01 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00002e60| 30 33 32 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |032.ADVA|PI32.dll|
|00002e70| 1a 01 94 88 26 00 00 a0 | 01 01 11 53 79 73 74 65 |....&...|...Syste|
|00002e80| 6d 46 75 6e 63 74 69 6f | 6e 30 33 33 0c 41 44 56 |mFunctio|n033.ADV|
|00002e90| 41 50 49 33 32 2e 64 6c | 6c 1b 01 92 88 2a 00 00 |API32.dl|l....*..|
|00002ea0| a0 01 01 15 55 6e 6c 6f | 63 6b 53 65 72 76 69 63 |....Unlo|ckServic|
|00002eb0| 65 44 61 74 61 62 61 73 | 65 0c 41 44 56 41 50 49 |eDatabas|e.ADVAPI|
|00002ec0| 33 32 2e 64 6c 6c 1c 01 | 98 8a 02 00 00 00 00 00 |32.dll..|........|
|00002ed0| 80 08 00 06 64 6c 63 61 | 70 69 00 88 19 00 00 a0 |....dlca|pi......|
|00002ee0| 01 01 06 41 63 73 4c 61 | 6e 0a 44 4c 43 41 50 49 |...AcsLa|n.DLCAPI|
|00002ef0| 2e 64 6c 6c 01 00 63 88 | 20 00 00 a0 01 01 0d 44 |.dll..c.| ......D|
|00002f00| 6c 63 43 61 6c 6c 44 72 | 69 76 65 72 0a 44 4c 43 |lcCallDr|iver.DLC|
|00002f10| 41 50 49 2e 64 6c 6c 02 | 00 8b 88 1b 00 00 a0 01 |API.dll.|........|
|00002f20| 01 08 4e 74 41 63 73 4c | 61 6e 0a 44 4c 43 41 50 |..NtAcsL|an.DLCAP|
|00002f30| 49 2e 64 6c 6c 03 00 9b | 8a 02 00 00 00 00 00 00 |I.dll...|........|
|00002f40| 80 0a 00 08 6b 65 72 6e | 65 6c 33 32 00 88 1d 00 |....kern|el32....|
|00002f50| 00 a0 01 01 08 41 64 64 | 41 74 6f 6d 41 0c 4b 45 |.....Add|AtomA.KE|
|00002f60| 52 4e 45 4c 33 32 2e 64 | 6c 6c 01 00 39 88 1d 00 |RNEL32.d|ll..9...|
|00002f70| 00 a0 01 01 08 41 64 64 | 41 74 6f 6d 57 0c 4b 45 |.....Add|AtomW.KE|
|00002f80| 52 4e 45 4c 33 32 2e 64 | 6c 6c 02 00 22 88 25 00 |RNEL32.d|ll..".%.|
|00002f90| 00 a0 01 01 10 41 64 64 | 43 6f 6e 73 6f 6c 65 41 |.....Add|ConsoleA|
|00002fa0| 6c 69 61 73 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |liasA.KE|RNEL32.d|
|00002fb0| 6c 6c 03 00 fb 88 25 00 | 00 a0 01 01 10 41 64 64 |ll....%.|.....Add|
|00002fc0| 43 6f 6e 73 6f 6c 65 41 | 6c 69 61 73 57 0c 4b 45 |ConsoleA|liasW.KE|
|00002fd0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 04 00 e4 88 21 00 |RNEL32.d|ll....!.|
|00002fe0| 00 a0 01 01 0c 41 6c 6c | 6f 63 43 6f 6e 73 6f 6c |.....All|ocConsol|
|00002ff0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 05 00 |e.KERNEL|32.dll..|
|00003000| 4a 88 24 00 00 a0 01 01 | 0f 41 6c 6c 6f 63 4c 53 |J.$.....|.AllocLS|
|00003010| 43 61 6c 6c 62 61 63 6b | 0c 4b 45 52 4e 45 4c 33 |Callback|.KERNEL3|
|00003020| 32 2e 64 6c 6c 06 00 6a | 88 24 00 00 a0 01 01 0f |2.dll..j|.$......|
|00003030| 41 6c 6c 6f 63 53 4c 43 | 61 6c 6c 62 61 63 6b 0c |AllocSLC|allback.|
|00003040| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 07 00 69 88 |KERNEL32|.dll..i.|
|00003050| 24 00 00 a0 01 01 0f 41 | 72 65 46 69 6c 65 41 70 |$......A|reFileAp|
|00003060| 69 73 41 4e 53 49 0c 4b | 45 52 4e 45 4c 33 32 2e |isANSI.K|ERNEL32.|
|00003070| 64 6c 6c 08 00 af 88 1f | 00 00 a0 01 01 0a 42 61 |dll.....|......Ba|
|00003080| 63 6b 75 70 52 65 61 64 | 0c 4b 45 52 4e 45 4c 33 |ckupRead|.KERNEL3|
|00003090| 32 2e 64 6c 6c 09 00 36 | 88 1f 00 00 a0 01 01 0a |2.dll..6|........|
|000030a0| 42 61 63 6b 75 70 53 65 | 65 6b 0c 4b 45 52 4e 45 |BackupSe|ek.KERNE|
|000030b0| 4c 33 32 2e 64 6c 6c 0a | 00 29 88 20 00 00 a0 01 |L32.dll.|.). ....|
|000030c0| 01 0b 42 61 63 6b 75 70 | 57 72 69 74 65 0c 4b 45 |..Backup|Write.KE|
|000030d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 0b 00 a3 88 2c 00 |RNEL32.d|ll....,.|
|000030e0| 00 a0 01 01 17 42 61 73 | 65 41 74 74 61 63 68 43 |.....Bas|eAttachC|
|000030f0| 6f 6d 70 6c 65 74 65 54 | 68 75 6e 6b 0c 4b 45 52 |ompleteT|hunk.KER|
|00003100| 4e 45 4c 33 32 2e 64 6c | 6c 0c 00 d8 88 23 00 00 |NEL32.dl|l....#..|
|00003110| a0 01 01 0e 42 61 73 65 | 70 44 65 62 75 67 44 75 |....Base|pDebugDu|
|00003120| 6d 70 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 0d |mp.KERNE|L32.dll.|
|00003130| 00 94 88 19 00 00 a0 01 | 01 04 42 65 65 70 0c 4b |........|..Beep.K|
|00003140| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 0e 00 93 88 29 |ERNEL32.|dll....)|
|00003150| 00 00 a0 01 01 14 42 65 | 67 69 6e 55 70 64 61 74 |......Be|ginUpdat|
|00003160| 65 52 65 73 6f 75 72 63 | 65 41 0c 4b 45 52 4e 45 |eResourc|eA.KERNE|
|00003170| 4c 33 32 2e 64 6c 6c 0f | 00 1d 88 29 00 00 a0 01 |L32.dll.|...)....|
|00003180| 01 14 42 65 67 69 6e 55 | 70 64 61 74 65 52 65 73 |..BeginU|pdateRes|
|00003190| 6f 75 72 63 65 57 0c 4b | 45 52 4e 45 4c 33 32 2e |ourceW.K|ERNEL32.|
|000031a0| 64 6c 6c 10 00 06 88 22 | 00 00 a0 01 01 0d 42 75 |dll...."|......Bu|
|000031b0| 69 6c 64 43 6f 6d 6d 44 | 43 42 41 0c 4b 45 52 4e |ildCommD|CBA.KERN|
|000031c0| 45 4c 33 32 2e 64 6c 6c | 11 00 74 88 2d 00 00 a0 |EL32.dll|..t.-...|
|000031d0| 01 01 18 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 41 |...Build|CommDCBA|
|000031e0| 6e 64 54 69 6d 65 6f 75 | 74 73 41 0c 4b 45 52 4e |ndTimeou|tsA.KERN|
|000031f0| 45 4c 33 32 2e 64 6c 6c | 12 00 f0 88 2d 00 00 a0 |EL32.dll|....-...|
|00003200| 01 01 18 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 41 |...Build|CommDCBA|
|00003210| 6e 64 54 69 6d 65 6f 75 | 74 73 57 0c 4b 45 52 4e |ndTimeou|tsW.KERN|
|00003220| 45 4c 33 32 2e 64 6c 6c | 13 00 d9 88 22 00 00 a0 |EL32.dll|...."...|
|00003230| 01 01 0d 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 57 |...Build|CommDCBW|
|00003240| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 14 00 5b |.KERNEL3|2.dll..[|
|00003250| 88 23 00 00 a0 01 01 0e | 43 61 6c 6c 4e 61 6d 65 |.#......|CallName|
|00003260| 64 50 69 70 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |dPipeA.K|ERNEL32.|
|00003270| 64 6c 6c 15 00 c4 88 23 | 00 00 a0 01 01 0e 43 61 |dll....#|......Ca|
|00003280| 6c 6c 4e 61 6d 65 64 50 | 69 70 65 57 0c 4b 45 52 |llNamedP|ipeW.KER|
|00003290| 4e 45 4c 33 32 2e 64 6c | 6c 16 00 ad 88 1f 00 00 |NEL32.dl|l.......|
|000032a0| a0 01 01 0a 43 61 6c 6c | 62 61 63 6b 31 32 0c 4b |....Call|back12.K|
|000032b0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 17 00 8a 88 1f |ERNEL32.|dll.....|
|000032c0| 00 00 a0 01 01 0a 43 61 | 6c 6c 62 61 63 6b 31 36 |......Ca|llback16|
|000032d0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 18 00 85 |.KERNEL3|2.dll...|
|000032e0| 88 1f 00 00 a0 01 01 0a | 43 61 6c 6c 62 61 63 6b |........|Callback|
|000032f0| 32 30 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 19 |20.KERNE|L32.dll.|
|00003300| 00 89 88 1f 00 00 a0 01 | 01 0a 43 61 6c 6c 62 61 |........|..Callba|
|00003310| 63 6b 32 34 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ck24.KER|NEL32.dl|
|00003320| 6c 1a 00 84 88 1f 00 00 | a0 01 01 0a 43 61 6c 6c |l.......|....Call|
|00003330| 62 61 63 6b 32 38 0c 4b | 45 52 4e 45 4c 33 32 2e |back28.K|ERNEL32.|
|00003340| 64 6c 6c 1b 00 7f 88 1f | 00 00 a0 01 01 0a 43 61 |dll.....|......Ca|
|00003350| 6c 6c 62 61 63 6b 33 32 | 0c 4b 45 52 4e 45 4c 33 |llback32|.KERNEL3|
|00003360| 32 2e 64 6c 6c 1c 00 83 | 88 1f 00 00 a0 01 01 0a |2.dll...|........|
|00003370| 43 61 6c 6c 62 61 63 6b | 33 36 0c 4b 45 52 4e 45 |Callback|36.KERNE|
|00003380| 4c 33 32 2e 64 6c 6c 1d | 00 7e 88 1e 00 00 a0 01 |L32.dll.|.~......|
|00003390| 01 09 43 61 6c 6c 62 61 | 63 6b 34 0c 4b 45 52 4e |..Callba|ck4.KERN|
|000033a0| 45 4c 33 32 2e 64 6c 6c | 1e 00 b4 88 1f 00 00 a0 |EL32.dll|........|
|000033b0| 01 01 0a 43 61 6c 6c 62 | 61 63 6b 34 30 0c 4b 45 |...Callb|ack40.KE|
|000033c0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 1f 00 81 88 1f 00 |RNEL32.d|ll......|
|000033d0| 00 a0 01 01 0a 43 61 6c | 6c 62 61 63 6b 34 34 0c |.....Cal|lback44.|
|000033e0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 20 00 7c 88 |KERNEL32|.dll .|.|
|000033f0| 1f 00 00 a0 01 01 0a 43 | 61 6c 6c 62 61 63 6b 34 |.......C|allback4|
|00003400| 38 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 21 00 |8.KERNEL|32.dll!.|
|00003410| 77 88 1f 00 00 a0 01 01 | 0a 43 61 6c 6c 62 61 63 |w.......|.Callbac|
|00003420| 6b 35 32 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |k52.KERN|EL32.dll|
|00003430| 22 00 7b 88 1f 00 00 a0 | 01 01 0a 43 61 6c 6c 62 |".{.....|...Callb|
|00003440| 61 63 6b 35 36 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ack56.KE|RNEL32.d|
|00003450| 6c 6c 23 00 76 88 1f 00 | 00 a0 01 01 0a 43 61 6c |ll#.v...|.....Cal|
|00003460| 6c 62 61 63 6b 36 30 0c | 4b 45 52 4e 45 4c 33 32 |lback60.|KERNEL32|
|00003470| 2e 64 6c 6c 24 00 7a 88 | 1f 00 00 a0 01 01 0a 43 |.dll$.z.|.......C|
|00003480| 61 6c 6c 62 61 63 6b 36 | 34 0c 4b 45 52 4e 45 4c |allback6|4.KERNEL|
|00003490| 33 32 2e 64 6c 6c 25 00 | 75 88 1e 00 00 a0 01 01 |32.dll%.|u.......|
|000034a0| 09 43 61 6c 6c 62 61 63 | 6b 38 0c 4b 45 52 4e 45 |.Callbac|k8.KERNE|
|000034b0| 4c 33 32 2e 64 6c 6c 26 | 00 a8 88 23 00 00 a0 01 |L32.dll&|...#....|
|000034c0| 01 0e 43 6c 65 61 72 43 | 6f 6d 6d 42 72 65 61 6b |..ClearC|ommBreak|
|000034d0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 27 00 8a |.KERNEL3|2.dll'..|
|000034e0| 88 23 00 00 a0 01 01 0e | 43 6c 65 61 72 43 6f 6d |.#......|ClearCom|
|000034f0| 6d 45 72 72 6f 72 0c 4b | 45 52 4e 45 4c 33 32 2e |mError.K|ERNEL32.|
|00003500| 64 6c 6c 28 00 64 88 27 | 00 00 a0 01 01 12 43 6c |dll(.d.'|......Cl|
|00003510| 6f 73 65 43 6f 6e 73 6f | 6c 65 48 61 6e 64 6c 65 |oseConso|leHandle|
|00003520| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 29 00 c3 |.KERNEL3|2.dll)..|
|00003530| 88 20 00 00 a0 01 01 0b | 43 6c 6f 73 65 48 61 6e |. ......|CloseHan|
|00003540| 64 6c 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |dle.KERN|EL32.dll|
|00003550| 2a 00 a3 88 2c 00 00 a0 | 01 01 17 43 6c 6f 73 65 |*...,...|...Close|
|00003560| 50 72 6f 66 69 6c 65 55 | 73 65 72 4d 61 70 70 69 |ProfileU|serMappi|
|00003570| 6e 67 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 2b |ng.KERNE|L32.dll+|
|00003580| 00 9a 88 27 00 00 a0 01 | 01 12 43 6d 64 42 61 74 |...'....|..CmdBat|
|00003590| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 0c 4b 45 52 |Notifica|tion.KER|
|000035a0| 4e 45 4c 33 32 2e 64 6c | 6c 2c 00 c3 88 26 00 00 |NEL32.dl|l,...&..|
|000035b0| a0 01 01 11 43 6c 6f 73 | 65 53 79 73 74 65 6d 48 |....Clos|eSystemH|
|000035c0| 61 6e 64 6c 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |andle.KE|RNEL32.d|
|000035d0| 6c 6c 2d 00 0f 88 26 00 | 00 a0 01 01 11 43 6f 6d |ll-...&.|.....Com|
|000035e0| 6d 43 6f 6e 66 69 67 44 | 69 61 6c 6f 67 41 0c 4b |mConfigD|ialogA.K|
|000035f0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 2e 00 62 88 26 |ERNEL32.|dll..b.&|
|00003600| 00 00 a0 01 01 11 43 6f | 6d 6d 43 6f 6e 66 69 67 |......Co|mmConfig|
|00003610| 44 69 61 6c 6f 67 57 0c | 4b 45 52 4e 45 4c 33 32 |DialogW.|KERNEL32|
|00003620| 2e 64 6c 6c 2f 00 4b 88 | 24 00 00 a0 01 01 0f 43 |.dll/.K.|$......C|
|00003630| 6f 6d 70 61 72 65 46 69 | 6c 65 54 69 6d 65 0c 4b |ompareFi|leTime.K|
|00003640| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 30 00 01 88 23 |ERNEL32.|dll0...#|
|00003650| 00 00 a0 01 01 0e 43 6f | 6d 70 61 72 65 53 74 72 |......Co|mpareStr|
|00003660| 69 6e 67 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ingA.KER|NEL32.dl|
|00003670| 6c 31 00 59 88 23 00 00 | a0 01 01 0e 43 6f 6d 70 |l1.Y.#..|....Comp|
|00003680| 61 72 65 53 74 72 69 6e | 67 57 0c 4b 45 52 4e 45 |areStrin|gW.KERNE|
|00003690| 4c 33 32 2e 64 6c 6c 32 | 00 42 88 25 00 00 a0 01 |L32.dll2|.B.%....|
|000036a0| 01 10 43 6f 6e 6e 65 63 | 74 4e 61 6d 65 64 50 69 |..Connec|tNamedPi|
|000036b0| 70 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 33 |pe.KERNE|L32.dll3|
|000036c0| 00 95 88 27 00 00 a0 01 | 01 12 43 6f 6e 73 6f 6c |...'....|..Consol|
|000036d0| 65 4d 65 6e 75 43 6f 6e | 74 72 6f 6c 0c 4b 45 52 |eMenuCon|trol.KER|
|000036e0| 4e 45 4c 33 32 2e 64 6c | 6c 34 00 84 88 21 00 00 |NEL32.dl|l4...!..|
|000036f0| a0 01 01 0c 43 6f 6e 73 | 6f 6c 65 53 75 62 73 74 |....Cons|oleSubst|
|00003700| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 35 00 f4 |.KERNEL3|2.dll5..|
|00003710| 88 27 00 00 a0 01 01 12 | 43 6f 6e 74 69 6e 75 65 |.'......|Continue|
|00003720| 44 65 62 75 67 45 76 65 | 6e 74 0c 4b 45 52 4e 45 |DebugEve|nt.KERNE|
|00003730| 4c 33 32 2e 64 6c 6c 36 | 00 9d 88 29 00 00 a0 01 |L32.dll6|...)....|
|00003740| 01 14 43 6f 6e 76 65 72 | 74 44 65 66 61 75 6c 74 |..Conver|tDefault|
|00003750| 4c 6f 63 61 6c 65 0c 4b | 45 52 4e 45 4c 33 32 2e |Locale.K|ERNEL32.|
|00003760| 64 6c 6c 37 00 d0 88 2a | 00 00 a0 01 01 15 43 6f |dll7...*|......Co|
|00003770| 6e 76 65 72 74 54 6f 47 | 6c 6f 62 61 6c 48 61 6e |nvertToG|lobalHan|
|00003780| 64 6c 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |dle.KERN|EL32.dll|
|00003790| 38 00 82 88 1e 00 00 a0 | 01 01 09 43 6f 70 79 46 |8.......|...CopyF|
|000037a0| 69 6c 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ileA.KER|NEL32.dl|
|000037b0| 6c 39 00 7e 88 1e 00 00 | a0 01 01 09 43 6f 70 79 |l9.~....|....Copy|
|000037c0| 46 69 6c 65 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |FileW.KE|RNEL32.d|
|000037d0| 6c 6c 3a 00 67 88 2e 00 | 00 a0 01 01 19 43 72 65 |ll:.g...|.....Cre|
|000037e0| 61 74 65 43 6f 6e 73 6f | 6c 65 53 63 72 65 65 6e |ateConso|leScreen|
|000037f0| 42 75 66 66 65 72 0c 4b | 45 52 4e 45 4c 33 32 2e |Buffer.K|ERNEL32.|
|00003800| 64 6c 6c 3b 00 d7 88 25 | 00 00 a0 01 01 10 43 72 |dll;...%|......Cr|
|00003810| 65 61 74 65 44 69 72 65 | 63 74 6f 72 79 41 0c 4b |eateDire|ctoryA.K|
|00003820| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 3c 00 7f 88 27 |ERNEL32.|dll<...'|
|00003830| 00 00 a0 01 01 12 43 72 | 65 61 74 65 44 69 72 65 |......Cr|eateDire|
|00003840| 63 74 6f 72 79 45 78 41 | 0c 4b 45 52 4e 45 4c 33 |ctoryExA|.KERNEL3|
|00003850| 32 2e 64 6c 6c 3d 00 bd | 88 27 00 00 a0 01 01 12 |2.dll=..|.'......|
|00003860| 43 72 65 61 74 65 44 69 | 72 65 63 74 6f 72 79 45 |CreateDi|rectoryE|
|00003870| 78 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 3e |xW.KERNE|L32.dll>|
|00003880| 00 a6 88 25 00 00 a0 01 | 01 10 43 72 65 61 74 65 |...%....|..Create|
|00003890| 44 69 72 65 63 74 6f 72 | 79 57 0c 4b 45 52 4e 45 |Director|yW.KERNE|
|000038a0| 4c 33 32 2e 64 6c 6c 3f | 00 66 88 21 00 00 a0 01 |L32.dll?|.f.!....|
|000038b0| 01 0c 43 72 65 61 74 65 | 45 76 65 6e 74 41 0c 4b |..Create|EventA.K|
|000038c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 40 00 36 88 21 |ERNEL32.|dll@.6.!|
|000038d0| 00 00 a0 01 01 0c 43 72 | 65 61 74 65 45 76 65 6e |......Cr|eateEven|
|000038e0| 74 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 41 |tW.KERNE|L32.dllA|
|000038f0| 00 1f 88 20 00 00 a0 01 | 01 0b 43 72 65 61 74 65 |... ....|..Create|
|00003900| 46 69 6c 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |FileA.KE|RNEL32.d|
|00003910| 6c 6c 42 00 b8 88 27 00 | 00 a0 01 01 12 43 72 65 |llB...'.|.....Cre|
|00003920| 61 74 65 46 69 6c 65 4d | 61 70 70 69 6e 67 41 0c |ateFileM|appingA.|
|00003930| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 43 00 dd 88 |KERNEL32|.dllC...|
|00003940| 27 00 00 a0 01 01 12 43 | 72 65 61 74 65 46 69 6c |'......C|reateFil|
|00003950| 65 4d 61 70 70 69 6e 67 | 57 0c 4b 45 52 4e 45 4c |eMapping|W.KERNEL|
|00003960| 33 32 2e 64 6c 6c 44 00 | c6 88 20 00 00 a0 01 01 |32.dllD.|.. .....|
|00003970| 0b 43 72 65 61 74 65 46 | 69 6c 65 57 0c 4b 45 52 |.CreateF|ileW.KER|
|00003980| 4e 45 4c 33 32 2e 64 6c | 6c 45 00 9f 88 2b 00 00 |NEL32.dl|lE...+..|
|00003990| a0 01 01 16 43 72 65 61 | 74 65 49 6f 43 6f 6d 70 |....Crea|teIoComp|
|000039a0| 6c 65 74 69 6f 6e 50 6f | 72 74 0c 4b 45 52 4e 45 |letionPo|rt.KERNE|
|000039b0| 4c 33 32 2e 64 6c 6c 46 | 00 e8 88 27 00 00 a0 01 |L32.dllF|...'....|
|000039c0| 01 12 43 72 65 61 74 65 | 4b 65 72 6e 65 6c 54 68 |..Create|KernelTh|
|000039d0| 72 65 61 64 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |read.KER|NEL32.dl|
|000039e0| 6c 47 00 ad 88 24 00 00 | a0 01 01 0f 43 72 65 61 |lG...$..|....Crea|
|000039f0| 74 65 4d 61 69 6c 73 6c | 6f 74 41 0c 4b 45 52 4e |teMailsl|otA.KERN|
|00003a00| 45 4c 33 32 2e 64 6c 6c | 48 00 e5 88 24 00 00 a0 |EL32.dll|H...$...|
|00003a10| 01 01 0f 43 72 65 61 74 | 65 4d 61 69 6c 73 6c 6f |...Creat|eMailslo|
|00003a20| 74 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 49 |tW.KERNE|L32.dllI|
|00003a30| 00 ce 88 21 00 00 a0 01 | 01 0c 43 72 65 61 74 65 |...!....|..Create|
|00003a40| 4d 75 74 65 78 41 0c 4b | 45 52 4e 45 4c 33 32 2e |MutexA.K|ERNEL32.|
|00003a50| 64 6c 6c 4a 00 1b 88 21 | 00 00 a0 01 01 0c 43 72 |dllJ...!|......Cr|
|00003a60| 65 61 74 65 4d 75 74 65 | 78 57 0c 4b 45 52 4e 45 |eateMute|xW.KERNE|
|00003a70| 4c 33 32 2e 64 6c 6c 4b | 00 04 88 25 00 00 a0 01 |L32.dllK|...%....|
|00003a80| 01 10 43 72 65 61 74 65 | 4e 61 6d 65 64 50 69 70 |..Create|NamedPip|
|00003a90| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 4c |eA.KERNE|L32.dllL|
|00003aa0| 00 b1 88 25 00 00 a0 01 | 01 10 43 72 65 61 74 65 |...%....|..Create|
|00003ab0| 4e 61 6d 65 64 50 69 70 | 65 57 0c 4b 45 52 4e 45 |NamedPip|eW.KERNE|
|00003ac0| 4c 33 32 2e 64 6c 6c 4d | 00 9a 88 1f 00 00 a0 01 |L32.dllM|........|
|00003ad0| 01 0a 43 72 65 61 74 65 | 50 69 70 65 0c 4b 45 52 |..Create|Pipe.KER|
|00003ae0| 4e 45 4c 33 32 2e 64 6c | 6c 4e 00 e1 88 23 00 00 |NEL32.dl|lN...#..|
|00003af0| a0 01 01 0e 43 72 65 61 | 74 65 50 72 6f 63 65 73 |....Crea|teProces|
|00003b00| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 4f |sA.KERNE|L32.dllO|
|00003b10| 00 46 88 23 00 00 a0 01 | 01 0e 43 72 65 61 74 65 |.F.#....|..Create|
|00003b20| 50 72 6f 63 65 73 73 57 | 0c 4b 45 52 4e 45 4c 33 |ProcessW|.KERNEL3|
|00003b30| 32 2e 64 6c 6c 50 00 2f | 88 27 00 00 a0 01 01 12 |2.dllP./|.'......|
|00003b40| 43 72 65 61 74 65 52 65 | 6d 6f 74 65 54 68 72 65 |CreateRe|moteThre|
|00003b50| 61 64 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 51 |ad.KERNE|L32.dllQ|
|00003b60| 00 98 88 25 00 00 a0 01 | 01 10 43 72 65 61 74 65 |...%....|..Create|
|00003b70| 53 65 6d 61 70 68 6f 72 | 65 41 0c 4b 45 52 4e 45 |Semaphor|eA.KERNE|
|00003b80| 4c 33 32 2e 64 6c 6c 52 | 00 7a 88 25 00 00 a0 01 |L32.dllR|.z.%....|
|00003b90| 01 10 43 72 65 61 74 65 | 53 65 6d 61 70 68 6f 72 |..Create|Semaphor|
|00003ba0| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 53 |eW.KERNE|L32.dllS|
|00003bb0| 00 63 88 27 00 00 a0 01 | 01 12 43 72 65 61 74 65 |.c.'....|..Create|
|00003bc0| 53 6f 63 6b 65 74 48 61 | 6e 64 6c 65 0c 4b 45 52 |SocketHa|ndle.KER|
|00003bd0| 4e 45 4c 33 32 2e 64 6c | 6c 54 00 a4 88 28 00 00 |NEL32.dl|lT...(..|
|00003be0| a0 01 01 13 43 72 65 61 | 74 65 54 61 70 65 50 61 |....Crea|teTapePa|
|00003bf0| 72 74 69 74 69 6f 6e 0c | 4b 45 52 4e 45 4c 33 32 |rtition.|KERNEL32|
|00003c00| 2e 64 6c 6c 55 00 12 88 | 21 00 00 a0 01 01 0c 43 |.dllU...|!......C|
|00003c10| 72 65 61 74 65 54 68 72 | 65 61 64 0c 4b 45 52 4e |reateThr|ead.KERN|
|00003c20| 45 4c 33 32 2e 64 6c 6c | 56 00 0b 88 28 00 00 a0 |EL32.dll|V...(...|
|00003c30| 01 01 13 43 72 65 61 74 | 65 56 69 72 74 75 61 6c |...Creat|eVirtual|
|00003c40| 42 75 66 66 65 72 0c 4b | 45 52 4e 45 4c 33 32 2e |Buffer.K|ERNEL32.|
|00003c50| 64 6c 6c 57 00 13 88 2d | 00 00 a0 01 01 18 43 72 |dllW...-|......Cr|
|00003c60| 65 61 74 65 54 6f 6f 6c | 68 65 6c 70 33 32 53 6e |eateTool|help32Sn|
|00003c70| 61 70 73 68 6f 74 0c 4b | 45 52 4e 45 4c 33 32 2e |apshot.K|ERNEL32.|
|00003c80| 64 6c 6c 58 00 4d 88 27 | 00 00 a0 01 01 12 44 65 |dllX.M.'|......De|
|00003c90| 62 75 67 41 63 74 69 76 | 65 50 72 6f 63 65 73 73 |bugActiv|eProcess|
|00003ca0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 59 00 86 |.KERNEL3|2.dllY..|
|00003cb0| 88 1f 00 00 a0 01 01 0a | 44 65 62 75 67 42 72 65 |........|DebugBre|
|00003cc0| 61 6b 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 5a |ak.KERNE|L32.dllZ|
|00003cd0| 00 eb 88 25 00 00 a0 01 | 01 10 44 65 66 69 6e 65 |...%....|..Define|
|00003ce0| 44 6f 73 44 65 76 69 63 | 65 41 0c 4b 45 52 4e 45 |DosDevic|eA.KERNE|
|00003cf0| 4c 33 32 2e 64 6c 6c 5b | 00 a8 88 25 00 00 a0 01 |L32.dll[|...%....|
|00003d00| 01 10 44 65 66 69 6e 65 | 44 6f 73 44 65 76 69 63 |..Define|DosDevic|
|00003d10| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 5c |eW.KERNE|L32.dll\|
|00003d20| 00 91 88 1f 00 00 a0 01 | 01 0a 44 65 6c 65 74 65 |........|..Delete|
|00003d30| 41 74 6f 6d 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Atom.KER|NEL32.dl|
|00003d40| 6c 5d 00 d0 88 2a 00 00 | a0 01 01 15 44 65 6c 65 |l]...*..|....Dele|
|00003d50| 74 65 43 72 69 74 69 63 | 61 6c 53 65 63 74 69 6f |teCritic|alSectio|
|00003d60| 6e 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 5e 00 |n.KERNEL|32.dll^.|
|00003d70| 4a 88 20 00 00 a0 01 01 | 0b 44 65 6c 65 74 65 46 |J. .....|.DeleteF|
|00003d80| 69 6c 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ileA.KER|NEL32.dl|
|00003d90| 6c 5f 00 9c 88 20 00 00 | a0 01 01 0b 44 65 6c 65 |l_... ..|....Dele|
|00003da0| 74 65 46 69 6c 65 57 0c | 4b 45 52 4e 45 4c 33 32 |teFileW.|KERNEL32|
|00003db0| 2e 64 6c 6c 60 00 85 88 | 24 00 00 a0 01 01 0f 44 |.dll`...|$......D|
|00003dc0| 65 76 69 63 65 49 6f 43 | 6f 6e 74 72 6f 6c 0c 4b |eviceIoC|ontrol.K|
|00003dd0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 61 00 bd 88 2e |ERNEL32.|dlla....|
|00003de0| 00 00 a0 01 01 19 44 69 | 73 61 62 6c 65 54 68 72 |......Di|sableThr|
|00003df0| 65 61 64 4c 69 62 72 61 | 72 79 43 61 6c 6c 73 0c |eadLibra|ryCalls.|
|00003e00| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 62 00 c1 88 |KERNEL32|.dllb...|
|00003e10| 28 00 00 a0 01 01 13 44 | 69 73 63 6f 6e 6e 65 63 |(......D|isconnec|
|00003e20| 74 4e 61 6d 65 64 50 69 | 70 65 0c 4b 45 52 4e 45 |tNamedPi|pe.KERNE|
|00003e30| 4c 33 32 2e 64 6c 6c 63 | 00 1f 88 2a 00 00 a0 01 |L32.dllc|...*....|
|00003e40| 01 15 44 6f 73 44 61 74 | 65 54 69 6d 65 54 6f 46 |..DosDat|eTimeToF|
|00003e50| 69 6c 65 54 69 6d 65 0c | 4b 45 52 4e 45 4c 33 32 |ileTime.|KERNEL32|
|00003e60| 2e 64 6c 6c 64 00 92 88 | 2b 00 00 a0 01 01 16 44 |.dlld...|+......D|
|00003e70| 75 70 6c 69 63 61 74 65 | 43 6f 6e 73 6f 6c 65 48 |uplicate|ConsoleH|
|00003e80| 61 6e 64 6c 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |andle.KE|RNEL32.d|
|00003e90| 6c 6c 65 00 da 88 24 00 | 00 a0 01 01 0f 44 75 70 |lle...$.|.....Dup|
|00003ea0| 6c 69 63 61 74 65 48 61 | 6e 64 6c 65 0c 4b 45 52 |licateHa|ndle.KER|
|00003eb0| 4e 45 4c 33 32 2e 64 6c | 6c 66 00 ba 88 27 00 00 |NEL32.dl|lf...'..|
|00003ec0| a0 01 01 12 45 6e 64 55 | 70 64 61 74 65 52 65 73 |....EndU|pdateRes|
|00003ed0| 6f 75 72 63 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ourceA.K|ERNEL32.|
|00003ee0| 64 6c 6c 67 00 97 88 27 | 00 00 a0 01 01 12 45 6e |dllg...'|......En|
|00003ef0| 64 55 70 64 61 74 65 52 | 65 73 6f 75 72 63 65 57 |dUpdateR|esourceW|
|00003f00| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 68 00 80 |.KERNEL3|2.dllh..|
|00003f10| 88 29 00 00 a0 01 01 14 | 45 6e 74 65 72 43 72 69 |.)......|EnterCri|
|00003f20| 74 69 63 61 6c 53 65 63 | 74 69 6f 6e 0c 4b 45 52 |ticalSec|tion.KER|
|00003f30| 4e 45 4c 33 32 2e 64 6c | 6c 69 00 96 88 26 00 00 |NEL32.dl|li...&..|
|00003f40| a0 01 01 11 45 6e 75 6d | 43 61 6c 65 6e 64 61 72 |....Enum|Calendar|
|00003f50| 49 6e 66 6f 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |InfoA.KE|RNEL32.d|
|00003f60| 6c 6c 6a 00 1d 88 26 00 | 00 a0 01 01 11 45 6e 75 |llj...&.|.....Enu|
|00003f70| 6d 43 61 6c 65 6e 64 61 | 72 49 6e 66 6f 57 0c 4b |mCalenda|rInfoW.K|
|00003f80| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 6b 00 06 88 25 |ERNEL32.|dllk...%|
|00003f90| 00 00 a0 01 01 10 45 6e | 75 6d 44 61 74 65 46 6f |......En|umDateFo|
|00003fa0| 72 6d 61 74 73 41 0c 4b | 45 52 4e 45 4c 33 32 2e |rmatsA.K|ERNEL32.|
|00003fb0| 64 6c 6c 6c 00 69 88 25 | 00 00 a0 01 01 10 45 6e |dlll.i.%|......En|
|00003fc0| 75 6d 44 61 74 65 46 6f | 72 6d 61 74 73 57 0c 4b |umDateFo|rmatsW.K|
|00003fd0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 6d 00 52 88 2b |ERNEL32.|dllm.R.+|
|00003fe0| 00 00 a0 01 01 16 45 6e | 75 6d 52 65 73 6f 75 72 |......En|umResour|
|00003ff0| 63 65 4c 61 6e 67 75 61 | 67 65 73 41 0c 4b 45 52 |ceLangua|gesA.KER|
|00004000| 4e 45 4c 33 32 2e 64 6c | 6c 6e 00 d6 88 2b 00 00 |NEL32.dl|ln...+..|
|00004010| a0 01 01 16 45 6e 75 6d | 52 65 73 6f 75 72 63 65 |....Enum|Resource|
|00004020| 4c 61 6e 67 75 61 67 65 | 73 57 0c 4b 45 52 4e 45 |Language|sW.KERNE|
|00004030| 4c 33 32 2e 64 6c 6c 6f | 00 bf 88 27 00 00 a0 01 |L32.dllo|...'....|
|00004040| 01 12 45 6e 75 6d 52 65 | 73 6f 75 72 63 65 4e 61 |..EnumRe|sourceNa|
|00004050| 6d 65 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |mesA.KER|NEL32.dl|
|00004060| 6c 70 00 7f 88 27 00 00 | a0 01 01 12 45 6e 75 6d |lp...'..|....Enum|
|00004070| 52 65 73 6f 75 72 63 65 | 4e 61 6d 65 73 57 0c 4b |Resource|NamesW.K|
|00004080| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 71 00 68 88 27 |ERNEL32.|dllq.h.'|
|00004090| 00 00 a0 01 01 12 45 6e | 75 6d 52 65 73 6f 75 72 |......En|umResour|
|000040a0| 63 65 54 79 70 65 73 41 | 0c 4b 45 52 4e 45 4c 33 |ceTypesA|.KERNEL3|
|000040b0| 32 2e 64 6c 6c 72 00 5c | 88 27 00 00 a0 01 01 12 |2.dllr.\|.'......|
|000040c0| 45 6e 75 6d 52 65 73 6f | 75 72 63 65 54 79 70 65 |EnumReso|urceType|
|000040d0| 73 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 73 |sW.KERNE|L32.dlls|
|000040e0| 00 45 88 29 00 00 a0 01 | 01 14 45 6e 75 6d 53 79 |.E.)....|..EnumSy|
|000040f0| 73 74 65 6d 43 6f 64 65 | 50 61 67 65 73 41 0c 4b |stemCode|PagesA.K|
|00004100| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 74 00 c3 88 29 |ERNEL32.|dllt...)|
|00004110| 00 00 a0 01 01 14 45 6e | 75 6d 53 79 73 74 65 6d |......En|umSystem|
|00004120| 43 6f 64 65 50 61 67 65 | 73 57 0c 4b 45 52 4e 45 |CodePage|sW.KERNE|
|00004130| 4c 33 32 2e 64 6c 6c 75 | 00 ac 88 27 00 00 a0 01 |L32.dllu|...'....|
|00004140| 01 12 45 6e 75 6d 53 79 | 73 74 65 6d 4c 6f 63 61 |..EnumSy|stemLoca|
|00004150| 6c 65 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |lesA.KER|NEL32.dl|
|00004160| 6c 76 00 6d 88 27 00 00 | a0 01 01 12 45 6e 75 6d |lv.m.'..|....Enum|
|00004170| 53 79 73 74 65 6d 4c 6f | 63 61 6c 65 73 57 0c 4b |SystemLo|calesW.K|
|00004180| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 77 00 56 88 25 |ERNEL32.|dllw.V.%|
|00004190| 00 00 a0 01 01 10 45 6e | 75 6d 54 69 6d 65 46 6f |......En|umTimeFo|
|000041a0| 72 6d 61 74 73 41 0c 4b | 45 52 4e 45 4c 33 32 2e |rmatsA.K|ERNEL32.|
|000041b0| 64 6c 6c 78 00 4c 88 25 | 00 00 a0 01 01 10 45 6e |dllx.L.%|......En|
|000041c0| 75 6d 54 69 6d 65 46 6f | 72 6d 61 74 73 57 0c 4b |umTimeFo|rmatsW.K|
|000041d0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 79 00 35 88 1e |ERNEL32.|dlly.5..|
|000041e0| 00 00 a0 01 01 09 45 72 | 61 73 65 54 61 70 65 0c |......Er|aseTape.|
|000041f0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 7a 00 1f 88 |KERNEL32|.dllz...|
|00004200| 27 00 00 a0 01 01 12 45 | 73 63 61 70 65 43 6f 6d |'......E|scapeCom|
|00004210| 6d 46 75 6e 63 74 69 6f | 6e 0c 4b 45 52 4e 45 4c |mFunctio|n.KERNEL|
|00004220| 33 32 2e 64 6c 6c 7b 00 | 63 88 20 00 00 a0 01 01 |32.dll{.|c. .....|
|00004230| 0b 45 78 69 74 50 72 6f | 63 65 73 73 0c 4b 45 52 |.ExitPro|cess.KER|
|00004240| 4e 45 4c 33 32 2e 64 6c | 6c 7c 00 1a 88 1f 00 00 |NEL32.dl|l|......|
|00004250| a0 01 01 0a 45 78 69 74 | 54 68 72 65 61 64 0c 4b |....Exit|Thread.K|
|00004260| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 7d 00 a2 88 1c |ERNEL32.|dll}....|
|00004270| 00 00 a0 01 01 07 45 78 | 69 74 56 44 4d 0c 4b 45 |......Ex|itVDM.KE|
|00004280| 52 4e 45 4c 33 32 2e 64 | 6c 6c 7e 00 18 88 2e 00 |RNEL32.d|ll~.....|
|00004290| 00 a0 01 01 19 45 78 70 | 61 6e 64 45 6e 76 69 72 |.....Exp|andEnvir|
|000042a0| 6f 6e 6d 65 6e 74 53 74 | 72 69 6e 67 73 41 0c 4b |onmentSt|ringsA.K|
|000042b0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 7f 00 54 88 2e |ERNEL32.|dll..T..|
|000042c0| 00 00 a0 01 01 19 45 78 | 70 61 6e 64 45 6e 76 69 |......Ex|pandEnvi|
|000042d0| 72 6f 6e 6d 65 6e 74 53 | 74 72 69 6e 67 73 57 0c |ronmentS|tringsW.|
|000042e0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 80 00 3d 88 |KERNEL32|.dll..=.|
|000042f0| 32 00 00 a0 01 01 1d 45 | 78 70 75 6e 67 65 43 6f |2......E|xpungeCo|
|00004300| 6e 73 6f 6c 65 43 6f 6d | 6d 61 6e 64 48 69 73 74 |nsoleCom|mandHist|
|00004310| 6f 72 79 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |oryA.KER|NEL32.dl|
|00004320| 6c 81 00 c9 88 32 00 00 | a0 01 01 1d 45 78 70 75 |l....2..|....Expu|
|00004330| 6e 67 65 43 6f 6e 73 6f | 6c 65 43 6f 6d 6d 61 6e |ngeConso|leComman|
|00004340| 64 48 69 73 74 6f 72 79 | 57 0c 4b 45 52 4e 45 4c |dHistory|W.KERNEL|
|00004350| 33 32 2e 64 6c 6c 82 00 | b2 88 28 00 00 a0 01 01 |32.dll..|..(.....|
|00004360| 13 45 78 74 65 6e 64 56 | 69 72 74 75 61 6c 42 75 |.ExtendV|irtualBu|
|00004370| 66 66 65 72 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ffer.KER|NEL32.dl|
|00004380| 6c 83 00 d3 88 1d 00 00 | a0 01 01 08 46 54 5f 45 |l.......|....FT_E|
|00004390| 78 69 74 30 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |xit0.KER|NEL32.dl|
|000043a0| 6c 84 00 ce 88 1e 00 00 | a0 01 01 09 46 54 5f 45 |l.......|....FT_E|
|000043b0| 78 69 74 31 32 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |xit12.KE|RNEL32.d|
|000043c0| 6c 6c 85 00 98 88 1e 00 | 00 a0 01 01 09 46 54 5f |ll......|.....FT_|
|000043d0| 45 78 69 74 31 36 0c 4b | 45 52 4e 45 4c 33 32 2e |Exit16.K|ERNEL32.|
|000043e0| 64 6c 6c 86 00 93 88 1e | 00 00 a0 01 01 09 46 54 |dll.....|......FT|
|000043f0| 5f 45 78 69 74 32 30 0c | 4b 45 52 4e 45 4c 33 32 |_Exit20.|KERNEL32|
|00004400| 2e 64 6c 6c 87 00 97 88 | 1e 00 00 a0 01 01 09 46 |.dll....|.......F|
|00004410| 54 5f 45 78 69 74 32 34 | 0c 4b 45 52 4e 45 4c 33 |T_Exit24|.KERNEL3|
|00004420| 32 2e 64 6c 6c 88 00 92 | 88 1e 00 00 a0 01 01 09 |2.dll...|........|
|00004430| 46 54 5f 45 78 69 74 32 | 38 0c 4b 45 52 4e 45 4c |FT_Exit2|8.KERNEL|
|00004440| 33 32 2e 64 6c 6c 89 00 | 8d 88 1e 00 00 a0 01 01 |32.dll..|........|
|00004450| 09 46 54 5f 45 78 69 74 | 33 32 0c 4b 45 52 4e 45 |.FT_Exit|32.KERNE|
|00004460| 4c 33 32 2e 64 6c 6c 8a | 00 91 88 1e 00 00 a0 01 |L32.dll.|........|
|00004470| 01 09 46 54 5f 45 78 69 | 74 33 36 0c 4b 45 52 4e |..FT_Exi|t36.KERN|
|00004480| 45 4c 33 32 2e 64 6c 6c | 8b 00 8c 88 1d 00 00 a0 |EL32.dll|........|
|00004490| 01 01 08 46 54 5f 45 78 | 69 74 34 0c 4b 45 52 4e |...FT_Ex|it4.KERN|
|000044a0| 45 4c 33 32 2e 64 6c 6c | 8c 00 c2 88 1e 00 00 a0 |EL32.dll|........|
|000044b0| 01 01 09 46 54 5f 45 78 | 69 74 34 30 0c 4b 45 52 |...FT_Ex|it40.KER|
|000044c0| 4e 45 4c 33 32 2e 64 6c | 6c 8d 00 8f 88 1e 00 00 |NEL32.dl|l.......|
|000044d0| a0 01 01 09 46 54 5f 45 | 78 69 74 34 34 0c 4b 45 |....FT_E|xit44.KE|
|000044e0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 8e 00 8a 88 1e 00 |RNEL32.d|ll......|
|000044f0| 00 a0 01 01 09 46 54 5f | 45 78 69 74 34 38 0c 4b |.....FT_|Exit48.K|
|00004500| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 8f 00 85 88 1e |ERNEL32.|dll.....|
|00004510| 00 00 a0 01 01 09 46 54 | 5f 45 78 69 74 35 32 0c |......FT|_Exit52.|
|00004520| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 90 00 89 88 |KERNEL32|.dll....|
|00004530| 1e 00 00 a0 01 01 09 46 | 54 5f 45 78 69 74 35 36 |.......F|T_Exit56|
|00004540| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 91 00 84 |.KERNEL3|2.dll...|
|00004550| 88 1d 00 00 a0 01 01 08 | 46 54 5f 45 78 69 74 38 |........|FT_Exit8|
|00004560| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 92 00 b8 |.KERNEL3|2.dll...|
|00004570| 88 1e 00 00 a0 01 01 09 | 46 54 5f 50 72 6f 6c 6f |........|FT_Prolo|
|00004580| 67 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 93 00 |g.KERNEL|32.dll..|
|00004590| 14 88 1d 00 00 a0 01 01 | 08 46 54 5f 54 68 75 6e |........|.FT_Thun|
|000045a0| 6b 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 94 00 |k.KERNEL|32.dll..|
|000045b0| 7e 88 22 00 00 a0 01 01 | 0d 46 61 74 61 6c 41 70 |~.".....|.FatalAp|
|000045c0| 70 45 78 69 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |pExitA.K|ERNEL32.|
|000045d0| 64 6c 6c 95 00 92 88 22 | 00 00 a0 01 01 0d 46 61 |dll...."|......Fa|
|000045e0| 74 61 6c 41 70 70 45 78 | 69 74 57 0c 4b 45 52 4e |talAppEx|itW.KERN|
|000045f0| 45 4c 33 32 2e 64 6c 6c | 96 00 7b 88 1e 00 00 a0 |EL32.dll|..{.....|
|00004600| 01 01 09 46 61 74 61 6c | 45 78 69 74 0c 4b 45 52 |...Fatal|Exit.KER|
|00004610| 4e 45 4c 33 32 2e 64 6c | 6c 97 00 fa 88 2a 00 00 |NEL32.dl|l....*..|
|00004620| a0 01 01 15 46 69 6c 65 | 54 69 6d 65 54 6f 44 6f |....File|TimeToDo|
|00004630| 73 44 61 74 65 54 69 6d | 65 0c 4b 45 52 4e 45 4c |sDateTim|e.KERNEL|
|00004640| 33 32 2e 64 6c 6c 98 00 | 5e 88 2c 00 00 a0 01 01 |32.dll..|^.,.....|
|00004650| 17 46 69 6c 65 54 69 6d | 65 54 6f 4c 6f 63 61 6c |.FileTim|eToLocal|
|00004660| 46 69 6c 65 54 69 6d 65 | 0c 4b 45 52 4e 45 4c 33 |FileTime|.KERNEL3|
|00004670| 32 2e 64 6c 6c 99 00 92 | 88 29 00 00 a0 01 01 14 |2.dll...|.)......|
|00004680| 46 69 6c 65 54 69 6d 65 | 54 6f 53 79 73 74 65 6d |FileTime|ToSystem|
|00004690| 54 69 6d 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Time.KER|NEL32.dl|
|000046a0| 6c 9a 00 7d 88 2f 00 00 | a0 01 01 1a 46 69 6c 6c |l..}./..|....Fill|
|000046b0| 43 6f 6e 73 6f 6c 65 4f | 75 74 70 75 74 41 74 74 |ConsoleO|utputAtt|
|000046c0| 72 69 62 75 74 65 0c 4b | 45 52 4e 45 4c 33 32 2e |ribute.K|ERNEL32.|
|000046d0| 64 6c 6c 9b 00 b7 88 30 | 00 00 a0 01 01 1b 46 69 |dll....0|......Fi|
|000046e0| 6c 6c 43 6f 6e 73 6f 6c | 65 4f 75 74 70 75 74 43 |llConsol|eOutputC|
|000046f0| 68 61 72 61 63 74 65 72 | 41 0c 4b 45 52 4e 45 4c |haracter|A.KERNEL|
|00004700| 33 32 2e 64 6c 6c 9c 00 | 9a 88 30 00 00 a0 01 01 |32.dll..|..0.....|
|00004710| 1b 46 69 6c 6c 43 6f 6e | 73 6f 6c 65 4f 75 74 70 |.FillCon|soleOutp|
|00004720| 75 74 43 68 61 72 61 63 | 74 65 72 57 0c 4b 45 52 |utCharac|terW.KER|
|00004730| 4e 45 4c 33 32 2e 64 6c | 6c 9d 00 83 88 1e 00 00 |NEL32.dl|l.......|
|00004740| a0 01 01 09 46 69 6e 64 | 41 74 6f 6d 41 0c 4b 45 |....Find|AtomA.KE|
|00004750| 52 4e 45 4c 33 32 2e 64 | 6c 6c 9e 00 22 88 1e 00 |RNEL32.d|ll.."...|
|00004760| 00 a0 01 01 09 46 69 6e | 64 41 74 6f 6d 57 0c 4b |.....Fin|dAtomW.K|
|00004770| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 9f 00 0b 88 1e |ERNEL32.|dll.....|
|00004780| 00 00 a0 01 01 09 46 69 | 6e 64 43 6c 6f 73 65 0c |......Fi|ndClose.|
|00004790| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c a0 00 fc 88 |KERNEL32|.dll....|
|000047a0| 30 00 00 a0 01 01 1b 46 | 69 6e 64 43 6c 6f 73 65 |0......F|indClose|
|000047b0| 43 68 61 6e 67 65 4e 6f | 74 69 66 69 63 61 74 69 |ChangeNo|tificati|
|000047c0| 6f 6e 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c a1 |on.KERNE|L32.dll.|
|000047d0| 00 aa 88 31 00 00 a0 01 | 01 1c 46 69 6e 64 46 69 |...1....|..FindFi|
|000047e0| 72 73 74 43 68 61 6e 67 | 65 4e 6f 74 69 66 69 63 |rstChang|eNotific|
|000047f0| 61 74 69 6f 6e 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ationA.K|ERNEL32.|
|00004800| 64 6c 6c a2 00 54 88 31 | 00 00 a0 01 01 1c 46 69 |dll..T.1|......Fi|
|00004810| 6e 64 46 69 72 73 74 43 | 68 61 6e 67 65 4e 6f 74 |ndFirstC|hangeNot|
|00004820| 69 66 69 63 61 74 69 6f | 6e 57 0c 4b 45 52 4e 45 |ificatio|nW.KERNE|
|00004830| 4c 33 32 2e 64 6c 6c a3 | 00 3d 88 23 00 00 a0 01 |L32.dll.|.=.#....|
|00004840| 01 0e 46 69 6e 64 46 69 | 72 73 74 46 69 6c 65 41 |..FindFi|rstFileA|
|00004850| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c a4 00 1b |.KERNEL3|2.dll...|
|00004860| 88 23 00 00 a0 01 01 0e | 46 69 6e 64 46 69 72 73 |.#......|FindFirs|
|00004870| 74 46 69 6c 65 57 0c 4b | 45 52 4e 45 4c 33 32 2e |tFileW.K|ERNEL32.|
|00004880| 64 6c 6c a5 00 04 88 2f | 00 00 a0 01 01 1a 46 69 |dll..../|......Fi|
|00004890| 6e 64 4e 65 78 74 43 68 | 61 6e 67 65 4e 6f 74 69 |ndNextCh|angeNoti|
|000048a0| 66 69 63 61 74 69 6f 6e | 0c 4b 45 52 4e 45 4c 33 |fication|.KERNEL3|
|000048b0| 32 2e 64 6c 6c a6 00 fe | 88 22 00 00 a0 01 01 0d |2.dll...|."......|
|000048c0| 46 69 6e 64 4e 65 78 74 | 46 69 6c 65 41 0c 4b 45 |FindNext|FileA.KE|
|000048d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c a7 00 83 88 22 00 |RNEL32.d|ll....".|
|000048e0| 00 a0 01 01 0d 46 69 6e | 64 4e 65 78 74 46 69 6c |.....Fin|dNextFil|
|000048f0| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c a8 |eW.KERNE|L32.dll.|
|00004900| 00 6c 88 22 00 00 a0 01 | 01 0d 46 69 6e 64 52 65 |.l."....|..FindRe|
|00004910| 73 6f 75 72 63 65 41 0c | 4b 45 52 4e 45 4c 33 32 |sourceA.|KERNEL32|
|00004920| 2e 64 6c 6c a9 00 58 88 | 24 00 00 a0 01 01 0f 46 |.dll..X.|$......F|
|00004930| 69 6e 64 52 65 73 6f 75 | 72 63 65 45 78 41 0c 4b |indResou|rceExA.K|
|00004940| 45 52 4e 45 4c 33 32 2e | 64 6c 6c aa 00 96 88 24 |ERNEL32.|dll....$|
|00004950| 00 00 a0 01 01 0f 46 69 | 6e 64 52 65 73 6f 75 72 |......Fi|ndResour|
|00004960| 63 65 45 78 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ceExW.KE|RNEL32.d|
|00004970| 6c 6c ab 00 7f 88 22 00 | 00 a0 01 01 0d 46 69 6e |ll....".|.....Fin|
|00004980| 64 52 65 73 6f 75 72 63 | 65 57 0c 4b 45 52 4e 45 |dResourc|eW.KERNE|
|00004990| 4c 33 32 2e 64 6c 6c ac | 00 3f 88 2c 00 00 a0 01 |L32.dll.|.?.,....|
|000049a0| 01 17 46 6c 75 73 68 43 | 6f 6e 73 6f 6c 65 49 6e |..FlushC|onsoleIn|
|000049b0| 70 75 74 42 75 66 66 65 | 72 0c 4b 45 52 4e 45 4c |putBuffe|r.KERNEL|
|000049c0| 33 32 2e 64 6c 6c ad 00 | 0b 88 25 00 00 a0 01 01 |32.dll..|..%.....|
|000049d0| 10 46 6c 75 73 68 46 69 | 6c 65 42 75 66 66 65 72 |.FlushFi|leBuffer|
|000049e0| 73 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c ae 00 |s.KERNEL|32.dll..|
|000049f0| 08 88 2a 00 00 a0 01 01 | 15 46 6c 75 73 68 49 6e |..*.....|.FlushIn|
|00004a00| 73 74 72 75 63 74 69 6f | 6e 43 61 63 68 65 0c 4b |structio|nCache.K|
|00004a10| 45 52 4e 45 4c 33 32 2e | 64 6c 6c af 00 d4 88 24 |ERNEL32.|dll....$|
|00004a20| 00 00 a0 01 01 0f 46 6c | 75 73 68 56 69 65 77 4f |......Fl|ushViewO|
|00004a30| 66 46 69 6c 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |fFile.KE|RNEL32.d|
|00004a40| 6c 6c b0 00 85 88 20 00 | 00 a0 01 01 0b 46 6f 6c |ll.... .|.....Fol|
|00004a50| 64 53 74 72 69 6e 67 41 | 0c 4b 45 52 4e 45 4c 33 |dStringA|.KERNEL3|
|00004a60| 32 2e 64 6c 6c b1 00 21 | 88 20 00 00 a0 01 01 0b |2.dll..!|. ......|
|00004a70| 46 6f 6c 64 53 74 72 69 | 6e 67 57 0c 4b 45 52 4e |FoldStri|ngW.KERN|
|00004a80| 45 4c 33 32 2e 64 6c 6c | b2 00 0a 88 23 00 00 a0 |EL32.dll|....#...|
|00004a90| 01 01 0e 46 6f 72 6d 61 | 74 4d 65 73 73 61 67 65 |...Forma|tMessage|
|00004aa0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c b3 00 |A.KERNEL|32.dll..|
|00004ab0| e7 88 23 00 00 a0 01 01 | 0e 46 6f 72 6d 61 74 4d |..#.....|.FormatM|
|00004ac0| 65 73 73 61 67 65 57 0c | 4b 45 52 4e 45 4c 33 32 |essageW.|KERNEL32|
|00004ad0| 2e 64 6c 6c b4 00 d0 88 | 20 00 00 a0 01 01 0b 46 |.dll....| ......F|
|00004ae0| 72 65 65 43 6f 6e 73 6f | 6c 65 0c 4b 45 52 4e 45 |reeConso|le.KERNE|
|00004af0| 4c 33 32 2e 64 6c 6c b5 | 00 05 88 2c 00 00 a0 01 |L32.dll.|...,....|
|00004b00| 01 17 46 72 65 65 45 6e | 76 69 72 6f 6e 6d 65 6e |..FreeEn|vironmen|
|00004b10| 74 53 74 72 69 6e 67 73 | 41 0c 4b 45 52 4e 45 4c |tStrings|A.KERNEL|
|00004b20| 33 32 2e 64 6c 6c b6 00 | ff 88 2c 00 00 a0 01 01 |32.dll..|..,.....|
|00004b30| 17 46 72 65 65 45 6e 76 | 69 72 6f 6e 6d 65 6e 74 |.FreeEnv|ironment|
|00004b40| 53 74 72 69 6e 67 73 57 | 0c 4b 45 52 4e 45 4c 33 |StringsW|.KERNEL3|
|00004b50| 32 2e 64 6c 6c b7 00 e8 | 88 23 00 00 a0 01 01 0e |2.dll...|.#......|
|00004b60| 46 72 65 65 4c 53 43 61 | 6c 6c 62 61 63 6b 0c 4b |FreeLSCa|llback.K|
|00004b70| 45 52 4e 45 4c 33 32 2e | 64 6c 6c b8 00 23 88 20 |ERNEL32.|dll..#. |
|00004b80| 00 00 a0 01 01 0b 46 72 | 65 65 4c 69 62 72 61 72 |......Fr|eeLibrar|
|00004b90| 79 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c b9 00 |y.KERNEL|32.dll..|
|00004ba0| ff 88 2d 00 00 a0 01 01 | 18 46 72 65 65 4c 69 62 |..-.....|.FreeLib|
|00004bb0| 72 61 72 79 41 6e 64 45 | 78 69 74 54 68 72 65 61 |raryAndE|xitThrea|
|00004bc0| 64 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c ba 00 |d.KERNEL|32.dll..|
|00004bd0| df 88 21 00 00 a0 01 01 | 0c 46 72 65 65 52 65 73 |..!.....|.FreeRes|
|00004be0| 6f 75 72 63 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ource.KE|RNEL32.d|
|00004bf0| 6c 6c bb 00 88 88 26 00 | 00 a0 01 01 11 46 72 65 |ll....&.|.....Fre|
|00004c00| 65 56 69 72 74 75 61 6c | 42 75 66 66 65 72 0c 4b |eVirtual|Buffer.K|
|00004c10| 45 52 4e 45 4c 33 32 2e | 64 6c 6c bc 00 84 88 23 |ERNEL32.|dll....#|
|00004c20| 00 00 a0 01 01 0e 46 72 | 65 65 53 4c 43 61 6c 6c |......Fr|eeSLCall|
|00004c30| 62 61 63 6b 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |back.KER|NEL32.dl|
|00004c40| 6c bd 00 1e 88 2d 00 00 | a0 01 01 18 47 65 6e 65 |l....-..|....Gene|
|00004c50| 72 61 74 65 43 6f 6e 73 | 6f 6c 65 43 74 72 6c 45 |rateCons|oleCtrlE|
|00004c60| 76 65 6e 74 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |vent.KER|NEL32.dl|
|00004c70| 6c be 00 a2 88 1b 00 00 | a0 01 01 06 47 65 74 41 |l.......|....GetA|
|00004c80| 43 50 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c bf |CP.KERNE|L32.dll.|
|00004c90| 00 66 88 21 00 00 a0 01 | 01 0c 47 65 74 41 74 6f |.f.!....|..GetAto|
|00004ca0| 6d 4e 61 6d 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |mNameA.K|ERNEL32.|
|00004cb0| 64 6c 6c c0 00 da 88 21 | 00 00 a0 01 01 0c 47 65 |dll....!|......Ge|
|00004cc0| 74 41 74 6f 6d 4e 61 6d | 65 57 0c 4b 45 52 4e 45 |tAtomNam|eW.KERNE|
|00004cd0| 4c 33 32 2e 64 6c 6c c1 | 00 c3 88 22 00 00 a0 01 |L32.dll.|..."....|
|00004ce0| 01 0d 47 65 74 42 69 6e | 61 72 79 54 79 70 65 0c |..GetBin|aryType.|
|00004cf0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c c2 00 22 88 |KERNEL32|.dll..".|
|00004d00| 23 00 00 a0 01 01 0e 47 | 65 74 42 69 6e 61 72 79 |#......G|etBinary|
|00004d10| 54 79 70 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |TypeA.KE|RNEL32.d|
|00004d20| 6c 6c c3 00 de 88 23 00 | 00 a0 01 01 0e 47 65 74 |ll....#.|.....Get|
|00004d30| 42 69 6e 61 72 79 54 79 | 70 65 57 0c 4b 45 52 4e |BinaryTy|peW.KERN|
|00004d40| 45 4c 33 32 2e 64 6c 6c | c4 00 c7 88 1e 00 00 a0 |EL32.dll|........|
|00004d50| 01 01 09 47 65 74 43 50 | 49 6e 66 6f 0c 4b 45 52 |...GetCP|Info.KER|
|00004d60| 4e 45 4c 33 32 2e 64 6c | 6c c5 00 0f 88 22 00 00 |NEL32.dl|l...."..|
|00004d70| a0 01 01 0d 47 65 74 43 | 6f 6d 6d 43 6f 6e 66 69 |....GetC|ommConfi|
|00004d80| 67 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c c6 00 |g.KERNEL|32.dll..|
|00004d90| 43 88 20 00 00 a0 01 01 | 0b 47 65 74 43 6f 6d 6d |C. .....|.GetComm|
|00004da0| 4d 61 73 6b 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Mask.KER|NEL32.dl|
|00004db0| 6c c7 00 10 88 27 00 00 | a0 01 01 12 47 65 74 43 |l....'..|....GetC|
|00004dc0| 6f 6d 6d 4d 6f 64 65 6d | 53 74 61 74 75 73 0c 4b |ommModem|Status.K|
|00004dd0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c c8 00 17 88 26 |ERNEL32.|dll....&|
|00004de0| 00 00 a0 01 01 11 47 65 | 74 43 6f 6d 6d 50 72 6f |......Ge|tCommPro|
|00004df0| 70 65 72 74 69 65 73 0c | 4b 45 52 4e 45 4c 33 32 |perties.|KERNEL32|
|00004e00| 2e 64 6c 6c c9 00 61 88 | 21 00 00 a0 01 01 0c 47 |.dll..a.|!......G|
|00004e10| 65 74 43 6f 6d 6d 53 74 | 61 74 65 0c 4b 45 52 4e |etCommSt|ate.KERN|
|00004e20| 45 4c 33 32 2e 64 6c 6c | ca 00 96 88 24 00 00 a0 |EL32.dll|....$...|
|00004e30| 01 01 0f 47 65 74 43 6f | 6d 6d 54 69 6d 65 6f 75 |...GetCo|mmTimeou|
|00004e40| 74 73 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c cb |ts.KERNE|L32.dll.|
|00004e50| 00 36 88 24 00 00 a0 01 | 01 0f 47 65 74 43 6f 6d |.6.$....|..GetCom|
|00004e60| 6d 61 6e 64 4c 69 6e 65 | 41 0c 4b 45 52 4e 45 4c |mandLine|A.KERNEL|
|00004e70| 33 32 2e 64 6c 6c cc 00 | 93 88 24 00 00 a0 01 01 |32.dll..|..$.....|
|00004e80| 0f 47 65 74 43 6f 6d 6d | 61 6e 64 4c 69 6e 65 57 |.GetComm|andLineW|
|00004e90| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c cd 00 7c |.KERNEL3|2.dll..||
|00004ea0| 88 2b 00 00 a0 01 01 16 | 47 65 74 43 6f 6d 70 72 |.+......|GetCompr|
|00004eb0| 65 73 73 65 64 46 69 6c | 65 53 69 7a 65 41 0c 4b |essedFil|eSizeA.K|
|00004ec0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c ce 00 9a 88 2b |ERNEL32.|dll....+|
|00004ed0| 00 00 a0 01 01 16 47 65 | 74 43 6f 6d 70 72 65 73 |......Ge|tCompres|
|00004ee0| 73 65 64 46 69 6c 65 53 | 69 7a 65 57 0c 4b 45 52 |sedFileS|izeW.KER|
|00004ef0| 4e 45 4c 33 32 2e 64 6c | 6c cf 00 83 88 25 00 00 |NEL32.dl|l....%..|
|00004f00| a0 01 01 10 47 65 74 43 | 6f 6d 70 75 74 65 72 4e |....GetC|omputerN|
|00004f10| 61 6d 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ameA.KER|NEL32.dl|
|00004f20| 6c d0 00 04 88 25 00 00 | a0 01 01 10 47 65 74 43 |l....%..|....GetC|
|00004f30| 6f 6d 70 75 74 65 72 4e | 61 6d 65 57 0c 4b 45 52 |omputerN|ameW.KER|
|00004f40| 4e 45 4c 33 32 2e 64 6c | 6c d1 00 ed 88 25 00 00 |NEL32.dl|l....%..|
|00004f50| a0 01 01 10 47 65 74 43 | 6f 6e 73 6f 6c 65 41 6c |....GetC|onsoleAl|
|00004f60| 69 61 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |iasA.KER|NEL32.dl|
|00004f70| 6c d2 00 15 88 29 00 00 | a0 01 01 14 47 65 74 43 |l....)..|....GetC|
|00004f80| 6f 6e 73 6f 6c 65 41 6c | 69 61 73 45 78 65 73 41 |onsoleAl|iasExesA|
|00004f90| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c d3 00 77 |.KERNEL3|2.dll..w|
|00004fa0| 88 2f 00 00 a0 01 01 1a | 47 65 74 43 6f 6e 73 6f |./......|GetConso|
|00004fb0| 6c 65 41 6c 69 61 73 45 | 78 65 73 4c 65 6e 67 74 |leAliasE|xesLengt|
|00004fc0| 68 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c d4 |hA.KERNE|L32.dll.|
|00004fd0| 00 08 88 2f 00 00 a0 01 | 01 1a 47 65 74 43 6f 6e |.../....|..GetCon|
|00004fe0| 73 6f 6c 65 41 6c 69 61 | 73 45 78 65 73 4c 65 6e |soleAlia|sExesLen|
|00004ff0| 67 74 68 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |gthW.KER|NEL32.dl|
|00005000| 6c d5 00 f1 88 29 00 00 | a0 01 01 14 47 65 74 43 |l....)..|....GetC|
|00005010| 6f 6e 73 6f 6c 65 41 6c | 69 61 73 45 78 65 73 57 |onsoleAl|iasExesW|
|00005020| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c d6 00 5e |.KERNEL3|2.dll..^|
|00005030| 88 25 00 00 a0 01 01 10 | 47 65 74 43 6f 6e 73 6f |.%......|GetConso|
|00005040| 6c 65 41 6c 69 61 73 57 | 0c 4b 45 52 4e 45 4c 33 |leAliasW|.KERNEL3|
|00005050| 32 2e 64 6c 6c d7 00 fa | 88 27 00 00 a0 01 01 12 |2.dll...|.'......|
|00005060| 47 65 74 43 6f 6e 73 6f | 6c 65 41 6c 69 61 73 65 |GetConso|leAliase|
|00005070| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c d8 |sA.KERNE|L32.dll.|
|00005080| 00 33 88 2d 00 00 a0 01 | 01 18 47 65 74 43 6f 6e |.3.-....|..GetCon|
|00005090| 73 6f 6c 65 41 6c 69 61 | 73 65 73 4c 65 6e 67 74 |soleAlia|sesLengt|
|000050a0| 68 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c d9 |hA.KERNE|L32.dll.|
|000050b0| 00 c4 88 2d 00 00 a0 01 | 01 18 47 65 74 43 6f 6e |...-....|..GetCon|
|000050c0| 73 6f 6c 65 41 6c 69 61 | 73 65 73 4c 65 6e 67 74 |soleAlia|sesLengt|
|000050d0| 68 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c da |hW.KERNE|L32.dll.|
|000050e0| 00 ad 88 27 00 00 a0 01 | 01 12 47 65 74 43 6f 6e |...'....|..GetCon|
|000050f0| 73 6f 6c 65 41 6c 69 61 | 73 65 73 57 0c 4b 45 52 |soleAlia|sesW.KER|
|00005100| 4e 45 4c 33 32 2e 64 6c | 6c db 00 1a 88 21 00 00 |NEL32.dl|l....!..|
|00005110| a0 01 01 0c 47 65 74 43 | 6f 6e 73 6f 6c 65 43 50 |....GetC|onsoleCP|
|00005120| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c dc 00 ab |.KERNEL3|2.dll...|
|00005130| 88 2e 00 00 a0 01 01 19 | 47 65 74 43 6f 6e 73 6f |........|GetConso|
|00005140| 6c 65 43 6f 6d 6d 61 6e | 64 48 69 73 74 6f 72 79 |leComman|dHistory|
|00005150| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c dd 00 |A.KERNEL|32.dll..|
|00005160| 31 88 34 00 00 a0 01 01 | 1f 47 65 74 43 6f 6e 73 |1.4.....|.GetCons|
|00005170| 6f 6c 65 43 6f 6d 6d 61 | 6e 64 48 69 73 74 6f 72 |oleComma|ndHistor|
|00005180| 79 4c 65 6e 67 74 68 41 | 0c 4b 45 52 4e 45 4c 33 |yLengthA|.KERNEL3|
|00005190| 32 2e 64 6c 6c de 00 c2 | 88 34 00 00 a0 01 01 1f |2.dll...|.4......|
|000051a0| 47 65 74 43 6f 6e 73 6f | 6c 65 43 6f 6d 6d 61 6e |GetConso|leComman|
|000051b0| 64 48 69 73 74 6f 72 79 | 4c 65 6e 67 74 68 57 0c |dHistory|LengthW.|
|000051c0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c df 00 ab 88 |KERNEL32|.dll....|
|000051d0| 2e 00 00 a0 01 01 19 47 | 65 74 43 6f 6e 73 6f 6c |.......G|etConsol|
|000051e0| 65 43 6f 6d 6d 61 6e 64 | 48 69 73 74 6f 72 79 57 |eCommand|HistoryW|
|000051f0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c e0 00 18 |.KERNEL3|2.dll...|
|00005200| 88 29 00 00 a0 01 01 14 | 47 65 74 43 6f 6e 73 6f |.)......|GetConso|
|00005210| 6c 65 43 75 72 73 6f 72 | 49 6e 66 6f 0c 4b 45 52 |leCursor|Info.KER|
|00005220| 4e 45 4c 33 32 2e 64 6c | 6c e1 00 1f 88 2a 00 00 |NEL32.dl|l....*..|
|00005230| a0 01 01 15 47 65 74 43 | 6f 6e 73 6f 6c 65 44 69 |....GetC|onsoleDi|
|00005240| 73 70 6c 61 79 4d 6f 64 | 65 0c 4b 45 52 4e 45 4c |splayMod|e.KERNEL|
|00005250| 33 32 2e 64 6c 6c e2 00 | cb 88 27 00 00 a0 01 01 |32.dll..|..'.....|
|00005260| 12 47 65 74 43 6f 6e 73 | 6f 6c 65 46 6f 6e 74 49 |.GetCons|oleFontI|
|00005270| 6e 66 6f 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |nfo.KERN|EL32.dll|
|00005280| e3 00 08 88 27 00 00 a0 | 01 01 12 47 65 74 43 6f |....'...|...GetCo|
|00005290| 6e 73 6f 6c 65 46 6f 6e | 74 53 69 7a 65 0c 4b 45 |nsoleFon|tSize.KE|
|000052a0| 52 4e 45 4c 33 32 2e 64 | 6c 6c e4 00 f8 88 2c 00 |RNEL32.d|ll....,.|
|000052b0| 00 a0 01 01 17 47 65 74 | 43 6f 6e 73 6f 6c 65 48 |.....Get|ConsoleH|
|000052c0| 61 72 64 77 61 72 65 53 | 74 61 74 65 0c 4b 45 52 |ardwareS|tate.KER|
|000052d0| 4e 45 4c 33 32 2e 64 6c | 6c e5 00 f0 88 2e 00 00 |NEL32.dl|l.......|
|000052e0| a0 01 01 19 47 65 74 43 | 6f 6e 73 6f 6c 65 49 6e |....GetC|onsoleIn|
|000052f0| 70 75 74 57 61 69 74 48 | 61 6e 64 6c 65 0c 4b 45 |putWaitH|andle.KE|
|00005300| 52 4e 45 4c 33 32 2e 64 | 6c 6c e6 00 29 88 23 00 |RNEL32.d|ll..).#.|
|00005310| 00 a0 01 01 0e 47 65 74 | 43 6f 6e 73 6f 6c 65 4d |.....Get|ConsoleM|
|00005320| 6f 64 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ode.KERN|EL32.dll|
|00005330| e7 00 aa 88 27 00 00 a0 | 01 01 12 47 65 74 43 6f |....'...|...GetCo|
|00005340| 6e 73 6f 6c 65 4f 75 74 | 70 75 74 43 50 0c 4b 45 |nsoleOut|putCP.KE|
|00005350| 52 4e 45 4c 33 32 2e 64 | 6c 6c e8 00 02 88 2f 00 |RNEL32.d|ll..../.|
|00005360| 00 a0 01 01 1a 47 65 74 | 43 6f 6e 73 6f 6c 65 53 |.....Get|ConsoleS|
|00005370| 63 72 65 65 6e 42 75 66 | 66 65 72 49 6e 66 6f 0c |creenBuf|ferInfo.|
|00005380| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c e9 00 cf 88 |KERNEL32|.dll....|
|00005390| 25 00 00 a0 01 01 10 47 | 65 74 43 6f 6e 73 6f 6c |%......G|etConsol|
|000053a0| 65 54 69 74 6c 65 41 0c | 4b 45 52 4e 45 4c 33 32 |eTitleA.|KERNEL32|
|000053b0| 2e 64 6c 6c ea 00 e5 88 | 25 00 00 a0 01 01 10 47 |.dll....|%......G|
|000053c0| 65 74 43 6f 6e 73 6f 6c | 65 54 69 74 6c 65 57 0c |etConsol|eTitleW.|
|000053d0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c eb 00 ce 88 |KERNEL32|.dll....|
|000053e0| 27 00 00 a0 01 01 12 47 | 65 74 43 75 72 72 65 6e |'......G|etCurren|
|000053f0| 63 79 46 6f 72 6d 61 74 | 41 0c 4b 45 52 4e 45 4c |cyFormat|A.KERNEL|
|00005400| 33 32 2e 64 6c 6c ec 00 | 00 88 27 00 00 a0 01 01 |32.dll..|..'.....|
|00005410| 12 47 65 74 43 75 72 72 | 65 6e 63 79 46 6f 72 6d |.GetCurr|encyForm|
|00005420| 61 74 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |atW.KERN|EL32.dll|
|00005430| ed 00 e9 88 2a 00 00 a0 | 01 01 15 47 65 74 43 75 |....*...|...GetCu|
|00005440| 72 72 65 6e 74 43 6f 6e | 73 6f 6c 65 46 6f 6e 74 |rrentCon|soleFont|
|00005450| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c ee 00 a0 |.KERNEL3|2.dll...|
|00005460| 88 29 00 00 a0 01 01 14 | 47 65 74 43 75 72 72 65 |.)......|GetCurre|
|00005470| 6e 74 44 69 72 65 63 74 | 6f 72 79 41 0c 4b 45 52 |ntDirect|oryA.KER|
|00005480| 4e 45 4c 33 32 2e 64 6c | 6c ef 00 15 88 29 00 00 |NEL32.dl|l....)..|
|00005490| a0 01 01 14 47 65 74 43 | 75 72 72 65 6e 74 44 69 |....GetC|urrentDi|
|000054a0| 72 65 63 74 6f 72 79 57 | 0c 4b 45 52 4e 45 4c 33 |rectoryW|.KERNEL3|
|000054b0| 32 2e 64 6c 6c f0 00 fe | 88 26 00 00 a0 01 01 11 |2.dll...|.&......|
|000054c0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000054d0| 73 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c f1 00 |s.KERNEL|32.dll..|
|000054e0| 30 88 28 00 00 a0 01 01 | 13 47 65 74 43 75 72 72 |0.(.....|.GetCurr|
|000054f0| 65 6e 74 50 72 6f 63 65 | 73 73 49 64 0c 4b 45 52 |entProce|ssId.KER|
|00005500| 4e 45 4c 33 32 2e 64 6c | 6c f2 00 7e 88 25 00 00 |NEL32.dl|l..~.%..|
|00005510| a0 01 01 10 47 65 74 43 | 75 72 72 65 6e 74 54 68 |....GetC|urrentTh|
|00005520| 72 65 61 64 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |read.KER|NEL32.dl|
|00005530| 6c f3 00 b7 88 27 00 00 | a0 01 01 12 47 65 74 43 |l....'..|....GetC|
|00005540| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 0c 4b |urrentTh|readId.K|
|00005550| 45 52 4e 45 4c 33 32 2e | 64 6c 6c f4 00 05 88 23 |ERNEL32.|dll....#|
|00005560| 00 00 a0 01 01 0e 47 65 | 74 44 61 74 65 46 6f 72 |......Ge|tDateFor|
|00005570| 6d 61 74 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |matA.KER|NEL32.dl|
|00005580| 6c f5 00 cc 88 23 00 00 | a0 01 01 0e 47 65 74 44 |l....#..|....GetD|
|00005590| 61 74 65 46 6f 72 6d 61 | 74 57 0c 4b 45 52 4e 45 |ateForma|tW.KERNE|
|000055a0| 4c 33 32 2e 64 6c 6c f6 | 00 b5 88 24 00 00 a0 01 |L32.dll.|...$....|
|000055b0| 01 0f 47 65 74 44 61 79 | 6c 69 67 68 74 46 6c 61 |..GetDay|lightFla|
|000055c0| 67 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c f7 00 |g.KERNEL|32.dll..|
|000055d0| 40 88 2a 00 00 a0 01 01 | 15 47 65 74 44 65 66 61 |@.*.....|.GetDefa|
|000055e0| 75 6c 74 43 6f 6d 6d 43 | 6f 6e 66 69 67 41 0c 4b |ultCommC|onfigA.K|
|000055f0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c f8 00 fb 88 2a |ERNEL32.|dll....*|
|00005600| 00 00 a0 01 01 15 47 65 | 74 44 65 66 61 75 6c 74 |......Ge|tDefault|
|00005610| 43 6f 6d 6d 43 6f 6e 66 | 69 67 57 0c 4b 45 52 4e |CommConf|igW.KERN|
|00005620| 45 4c 33 32 2e 64 6c 6c | f9 00 e4 88 26 00 00 a0 |EL32.dll|....&...|
|00005630| 01 01 11 47 65 74 44 69 | 73 6b 46 72 65 65 53 70 |...GetDi|skFreeSp|
|00005640| 61 63 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |aceA.KER|NEL32.dl|
|00005650| 6c fa 00 af 88 26 00 00 | a0 01 01 11 47 65 74 44 |l....&..|....GetD|
|00005660| 69 73 6b 46 72 65 65 53 | 70 61 63 65 57 0c 4b 45 |iskFreeS|paceW.KE|
|00005670| 52 4e 45 4c 33 32 2e 64 | 6c 6c fb 00 98 88 22 00 |RNEL32.d|ll....".|
|00005680| 00 a0 01 01 0d 47 65 74 | 44 72 69 76 65 54 79 70 |.....Get|DriveTyp|
|00005690| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c fc |eA.KERNE|L32.dll.|
|000056a0| 00 12 88 22 00 00 a0 01 | 01 0d 47 65 74 44 72 69 |..."....|..GetDri|
|000056b0| 76 65 54 79 70 65 57 0c | 4b 45 52 4e 45 4c 33 32 |veTypeW.|KERNEL32|
|000056c0| 2e 64 6c 6c fd 00 fb 88 | 2a 00 00 a0 01 01 15 47 |.dll....|*......G|
|000056d0| 65 74 45 6e 76 69 72 6f | 6e 6d 65 6e 74 53 74 72 |etEnviro|nmentStr|
|000056e0| 69 6e 67 73 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ings.KER|NEL32.dl|
|000056f0| 6c fe 00 5e 88 2b 00 00 | a0 01 01 16 47 65 74 45 |l..^.+..|....GetE|
|00005700| 6e 76 69 72 6f 6e 6d 65 | 6e 74 53 74 72 69 6e 67 |nvironme|ntString|
|00005710| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c ff |sA.KERNE|L32.dll.|
|00005720| 00 1a 88 2b 00 00 a0 01 | 01 16 47 65 74 45 6e 76 |...+....|..GetEnv|
|00005730| 69 72 6f 6e 6d 65 6e 74 | 53 74 72 69 6e 67 73 57 |ironment|StringsW|
|00005740| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 01 02 |.KERNEL3|2.dll...|
|00005750| 88 2c 00 00 a0 01 01 17 | 47 65 74 45 6e 76 69 72 |.,......|GetEnvir|
|00005760| 6f 6e 6d 65 6e 74 56 61 | 72 69 61 62 6c 65 41 0c |onmentVa|riableA.|
|00005770| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 01 01 d9 88 |KERNEL32|.dll....|
|00005780| 2c 00 00 a0 01 01 17 47 | 65 74 45 6e 76 69 72 6f |,......G|etEnviro|
|00005790| 6e 6d 65 6e 74 56 61 72 | 69 61 62 6c 65 57 0c 4b |nmentVar|iableW.K|
|000057a0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 02 01 c2 88 21 |ERNEL32.|dll....!|
|000057b0| 00 00 a0 01 01 0c 47 65 | 74 45 72 72 6f 72 4d 6f |......Ge|tErrorMo|
|000057c0| 64 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 03 |de.KERNE|L32.dll.|
|000057d0| 01 5a 88 27 00 00 a0 01 | 01 12 47 65 74 45 78 69 |.Z.'....|..GetExi|
|000057e0| 74 43 6f 64 65 50 72 6f | 63 65 73 73 0c 4b 45 52 |tCodePro|cess.KER|
|000057f0| 4e 45 4c 33 32 2e 64 6c | 6c 04 01 e8 88 26 00 00 |NEL32.dl|l....&..|
|00005800| a0 01 01 11 47 65 74 45 | 78 69 74 43 6f 64 65 54 |....GetE|xitCodeT|
|00005810| 68 72 65 61 64 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |hread.KE|RNEL32.d|
|00005820| 6c 6c 05 01 70 88 27 00 | 00 a0 01 01 12 47 65 74 |ll..p.'.|.....Get|
|00005830| 46 69 6c 65 41 74 74 72 | 69 62 75 74 65 73 41 0c |FileAttr|ibutesA.|
|00005840| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 06 01 f2 88 |KERNEL32|.dll....|
|00005850| 27 00 00 a0 01 01 12 47 | 65 74 46 69 6c 65 41 74 |'......G|etFileAt|
|00005860| 74 72 69 62 75 74 65 73 | 57 0c 4b 45 52 4e 45 4c |tributes|W.KERNEL|
|00005870| 33 32 2e 64 6c 6c 07 01 | db 88 2f 00 00 a0 01 01 |32.dll..|../.....|
|00005880| 1a 47 65 74 46 69 6c 65 | 49 6e 66 6f 72 6d 61 74 |.GetFile|Informat|
|00005890| 69 6f 6e 42 79 48 61 6e | 64 6c 65 0c 4b 45 52 4e |ionByHan|dle.KERN|
|000058a0| 45 4c 33 32 2e 64 6c 6c | 08 01 bb 88 20 00 00 a0 |EL32.dll|.... ...|
|000058b0| 01 01 0b 47 65 74 46 69 | 6c 65 53 69 7a 65 0c 4b |...GetFi|leSize.K|
|000058c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 09 01 ca 88 20 |ERNEL32.|dll.... |
|000058d0| 00 00 a0 01 01 0b 47 65 | 74 46 69 6c 65 54 69 6d |......Ge|tFileTim|
|000058e0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 0a 01 |e.KERNEL|32.dll..|
|000058f0| d5 88 20 00 00 a0 01 01 | 0b 47 65 74 46 69 6c 65 |.. .....|.GetFile|
|00005900| 54 79 70 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Type.KER|NEL32.dl|
|00005910| 6c 0b 01 c1 88 25 00 00 | a0 01 01 10 47 65 74 46 |l....%..|....GetF|
|00005920| 75 6c 6c 50 61 74 68 4e | 61 6d 65 41 0c 4b 45 52 |ullPathN|ameA.KER|
|00005930| 4e 45 4c 33 32 2e 64 6c | 6c 0c 01 f6 88 25 00 00 |NEL32.dl|l....%..|
|00005940| a0 01 01 10 47 65 74 46 | 75 6c 6c 50 61 74 68 4e |....GetF|ullPathN|
|00005950| 61 6d 65 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ameW.KER|NEL32.dl|
|00005960| 6c 0d 01 df 88 25 00 00 | a0 01 01 10 47 65 74 48 |l....%..|....GetH|
|00005970| 61 6e 64 6c 65 43 6f 6e | 74 65 78 74 0c 4b 45 52 |andleCon|text.KER|
|00005980| 4e 45 4c 33 32 2e 64 6c | 6c 0e 01 a5 88 29 00 00 |NEL32.dl|l....)..|
|00005990| a0 01 01 14 47 65 74 48 | 61 6e 64 6c 65 49 6e 66 |....GetH|andleInf|
|000059a0| 6f 72 6d 61 74 69 6f 6e | 0c 4b 45 52 4e 45 4c 33 |ormation|.KERNEL3|
|000059b0| 32 2e 64 6c 6c 0f 01 fb | 88 28 00 00 a0 01 01 13 |2.dll...|.(......|
|000059c0| 47 65 74 4c 53 43 61 6c | 6c 62 61 63 6b 54 61 72 |GetLSCal|lbackTar|
|000059d0| 67 65 74 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |get.KERN|EL32.dll|
|000059e0| 10 01 bb 88 2a 00 00 a0 | 01 01 15 47 65 74 4c 53 |....*...|...GetLS|
|000059f0| 43 61 6c 6c 62 61 63 6b | 54 65 6d 70 6c 61 74 65 |Callback|Template|
|00005a00| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 11 01 e1 |.KERNEL3|2.dll...|
|00005a10| 88 30 00 00 a0 01 01 1b | 47 65 74 4c 61 72 67 65 |.0......|GetLarge|
|00005a20| 73 74 43 6f 6e 73 6f 6c | 65 57 69 6e 64 6f 77 53 |stConsol|eWindowS|
|00005a30| 69 7a 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ize.KERN|EL32.dll|
|00005a40| 12 01 04 88 21 00 00 a0 | 01 01 0c 47 65 74 4c 61 |....!...|...GetLa|
|00005a50| 73 74 45 72 72 6f 72 0c | 4b 45 52 4e 45 4c 33 32 |stError.|KERNEL32|
|00005a60| 2e 64 6c 6c 13 01 3b 88 | 21 00 00 a0 01 01 0c 47 |.dll..;.|!......G|
|00005a70| 65 74 4c 6f 63 61 6c 54 | 69 6d 65 0c 4b 45 52 4e |etLocalT|ime.KERN|
|00005a80| 45 4c 33 32 2e 64 6c 6c | 14 01 5e 88 23 00 00 a0 |EL32.dll|..^.#...|
|00005a90| 01 01 0e 47 65 74 4c 6f | 63 61 6c 65 49 6e 66 6f |...GetLo|caleInfo|
|00005aa0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 15 01 |A.KERNEL|32.dll..|
|00005ab0| b6 88 23 00 00 a0 01 01 | 0e 47 65 74 4c 6f 63 61 |..#.....|.GetLoca|
|00005ac0| 6c 65 49 6e 66 6f 57 0c | 4b 45 52 4e 45 4c 33 32 |leInfoW.|KERNEL32|
|00005ad0| 2e 64 6c 6c 16 01 9f 88 | 2c 00 00 a0 01 01 17 47 |.dll....|,......G|
|00005ae0| 65 74 4c 6f 67 69 63 61 | 6c 44 72 69 76 65 53 74 |etLogica|lDriveSt|
|00005af0| 72 69 6e 67 73 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ringsA.K|ERNEL32.|
|00005b00| 64 6c 6c 17 01 df 88 2c | 00 00 a0 01 01 17 47 65 |dll....,|......Ge|
|00005b10| 74 4c 6f 67 69 63 61 6c | 44 72 69 76 65 53 74 72 |tLogical|DriveStr|
|00005b20| 69 6e 67 73 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ingsW.KE|RNEL32.d|
|00005b30| 6c 6c 18 01 c8 88 25 00 | 00 a0 01 01 10 47 65 74 |ll....%.|.....Get|
|00005b40| 4c 6f 67 69 63 61 6c 44 | 72 69 76 65 73 0c 4b 45 |LogicalD|rives.KE|
|00005b50| 52 4e 45 4c 33 32 2e 64 | 6c 6c 19 01 a3 88 24 00 |RNEL32.d|ll....$.|
|00005b60| 00 a0 01 01 0f 47 65 74 | 4d 61 69 6c 73 6c 6f 74 |.....Get|Mailslot|
|00005b70| 49 6e 66 6f 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Info.KER|NEL32.dl|
|00005b80| 6c 1a 01 fb 88 27 00 00 | a0 01 01 12 47 65 74 4d |l....'..|....GetM|
|00005b90| 6f 64 75 6c 65 46 69 6c | 65 4e 61 6d 65 41 0c 4b |oduleFil|eNameA.K|
|00005ba0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 1b 01 1d 88 27 |ERNEL32.|dll....'|
|00005bb0| 00 00 a0 01 01 12 47 65 | 74 4d 6f 64 75 6c 65 46 |......Ge|tModuleF|
|00005bc0| 69 6c 65 4e 61 6d 65 57 | 0c 4b 45 52 4e 45 4c 33 |ileNameW|.KERNEL3|
|00005bd0| 32 2e 64 6c 6c 1c 01 06 | 88 25 00 00 a0 01 01 10 |2.dll...|.%......|
|00005be0| 47 65 74 4d 6f 64 75 6c | 65 48 61 6e 64 6c 65 41 |GetModul|eHandleA|
|00005bf0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 1d 01 d4 |.KERNEL3|2.dll...|
|00005c00| 88 25 00 00 a0 01 01 10 | 47 65 74 4d 6f 64 75 6c |.%......|GetModul|
|00005c10| 65 48 61 6e 64 6c 65 57 | 0c 4b 45 52 4e 45 4c 33 |eHandleW|.KERNEL3|
|00005c20| 32 2e 64 6c 6c 1e 01 bd | 88 2d 00 00 a0 01 01 18 |2.dll...|.-......|
|00005c30| 47 65 74 4e 61 6d 65 64 | 50 69 70 65 48 61 6e 64 |GetNamed|PipeHand|
|00005c40| 6c 65 53 74 61 74 65 41 | 0c 4b 45 52 4e 45 4c 33 |leStateA|.KERNEL3|
|00005c50| 32 2e 64 6c 6c 1f 01 b4 | 88 2d 00 00 a0 01 01 18 |2.dll...|.-......|
|00005c60| 47 65 74 4e 61 6d 65 64 | 50 69 70 65 48 61 6e 64 |GetNamed|PipeHand|
|00005c70| 6c 65 53 74 61 74 65 57 | 0c 4b 45 52 4e 45 4c 33 |leStateW|.KERNEL3|
|00005c80| 32 2e 64 6c 6c 20 01 9d | 88 25 00 00 a0 01 01 10 |2.dll ..|.%......|
|00005c90| 47 65 74 4e 61 6d 65 64 | 50 69 70 65 49 6e 66 6f |GetNamed|PipeInfo|
|00005ca0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 21 01 c4 |.KERNEL3|2.dll!..|
|00005cb0| 88 26 00 00 a0 01 01 11 | 47 65 74 4e 65 78 74 56 |.&......|GetNextV|
|00005cc0| 44 4d 43 6f 6d 6d 61 6e | 64 0c 4b 45 52 4e 45 4c |DMComman|d.KERNEL|
|00005cd0| 33 32 2e 64 6c 6c 22 01 | 7b 88 25 00 00 a0 01 01 |32.dll".|{.%.....|
|00005ce0| 10 47 65 74 4e 75 6d 62 | 65 72 46 6f 72 6d 61 74 |.GetNumb|erFormat|
|00005cf0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 23 01 |A.KERNEL|32.dll#.|
|00005d00| ae 88 25 00 00 a0 01 01 | 10 47 65 74 4e 75 6d 62 |..%.....|.GetNumb|
|00005d10| 65 72 46 6f 72 6d 61 74 | 57 0c 4b 45 52 4e 45 4c |erFormat|W.KERNEL|
|00005d20| 33 32 2e 64 6c 6c 24 01 | 97 88 2c 00 00 a0 01 01 |32.dll$.|..,.....|
|00005d30| 17 47 65 74 4e 75 6d 62 | 65 72 4f 66 43 6f 6e 73 |.GetNumb|erOfCons|
|00005d40| 6f 6c 65 46 6f 6e 74 73 | 0c 4b 45 52 4e 45 4c 33 |oleFonts|.KERNEL3|
|00005d50| 32 2e 64 6c 6c 25 01 b6 | 88 32 00 00 a0 01 01 1d |2.dll%..|.2......|
|00005d60| 47 65 74 4e 75 6d 62 65 | 72 4f 66 43 6f 6e 73 6f |GetNumbe|rOfConso|
|00005d70| 6c 65 49 6e 70 75 74 45 | 76 65 6e 74 73 0c 4b 45 |leInputE|vents.KE|
|00005d80| 52 4e 45 4c 33 32 2e 64 | 6c 6c 26 01 2e 88 33 00 |RNEL32.d|ll&...3.|
|00005d90| 00 a0 01 01 1e 47 65 74 | 4e 75 6d 62 65 72 4f 66 |.....Get|NumberOf|
|00005da0| 43 6f 6e 73 6f 6c 65 4d | 6f 75 73 65 42 75 74 74 |ConsoleM|ouseButt|
|00005db0| 6f 6e 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ons.KERN|EL32.dll|
|00005dc0| 27 01 b8 88 1d 00 00 a0 | 01 01 08 47 65 74 4f 45 |'.......|...GetOE|
|00005dd0| 4d 43 50 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |MCP.KERN|EL32.dll|
|00005de0| 28 01 58 88 28 00 00 a0 | 01 01 13 47 65 74 4f 76 |(.X.(...|...GetOv|
|00005df0| 65 72 6c 61 70 70 65 64 | 52 65 73 75 6c 74 0c 4b |erlapped|Result.K|
|00005e00| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 29 01 24 88 25 |ERNEL32.|dll).$.%|
|00005e10| 00 00 a0 01 01 10 47 65 | 74 50 72 69 6f 72 69 74 |......Ge|tPriorit|
|00005e20| 79 43 6c 61 73 73 0c 4b | 45 52 4e 45 4c 33 32 2e |yClass.K|ERNEL32.|
|00005e30| 64 6c 6c 2a 01 62 88 2a | 00 00 a0 01 01 15 47 65 |dll*.b.*|......Ge|
|00005e40| 74 50 72 69 76 61 74 65 | 50 72 6f 66 69 6c 65 49 |tPrivate|ProfileI|
|00005e50| 6e 74 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ntA.KERN|EL32.dll|
|00005e60| 2b 01 97 88 2a 00 00 a0 | 01 01 15 47 65 74 50 72 |+...*...|...GetPr|
|00005e70| 69 76 61 74 65 50 72 6f | 66 69 6c 65 49 6e 74 57 |ivatePro|fileIntW|
|00005e80| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 2c 01 80 |.KERNEL3|2.dll,..|
|00005e90| 88 2e 00 00 a0 01 01 19 | 47 65 74 50 72 69 76 61 |........|GetPriva|
|00005ea0| 74 65 50 72 6f 66 69 6c | 65 53 65 63 74 69 6f 6e |teProfil|eSection|
|00005eb0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 2d 01 |A.KERNEL|32.dll-.|
|00005ec0| e3 88 33 00 00 a0 01 01 | 1e 47 65 74 50 72 69 76 |..3.....|.GetPriv|
|00005ed0| 61 74 65 50 72 6f 66 69 | 6c 65 53 65 63 74 69 6f |ateProfi|leSectio|
|00005ee0| 6e 4e 61 6d 65 73 41 0c | 4b 45 52 4e 45 4c 33 32 |nNamesA.|KERNEL32|
|00005ef0| 2e 64 6c 6c 2e 01 e4 88 | 33 00 00 a0 01 01 1e 47 |.dll....|3......G|
|00005f00| 65 74 50 72 69 76 61 74 | 65 50 72 6f 66 69 6c 65 |etPrivat|eProfile|
|00005f10| 53 65 63 74 69 6f 6e 4e | 61 6d 65 73 57 0c 4b 45 |SectionN|amesW.KE|
|00005f20| 52 4e 45 4c 33 32 2e 64 | 6c 6c 2f 01 cd 88 2e 00 |RNEL32.d|ll/.....|
|00005f30| 00 a0 01 01 19 47 65 74 | 50 72 69 76 61 74 65 50 |.....Get|PrivateP|
|00005f40| 72 6f 66 69 6c 65 53 65 | 63 74 69 6f 6e 57 0c 4b |rofileSe|ctionW.K|
|00005f50| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 30 01 ca 88 2d |ERNEL32.|dll0...-|
|00005f60| 00 00 a0 01 01 18 47 65 | 74 50 72 69 76 61 74 65 |......Ge|tPrivate|
|00005f70| 50 72 6f 66 69 6c 65 53 | 74 72 69 6e 67 41 0c 4b |ProfileS|tringA.K|
|00005f80| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 31 01 3f 88 2d |ERNEL32.|dll1.?.-|
|00005f90| 00 00 a0 01 01 18 47 65 | 74 50 72 69 76 61 74 65 |......Ge|tPrivate|
|00005fa0| 50 72 6f 66 69 6c 65 53 | 74 72 69 6e 67 57 0c 4b |ProfileS|tringW.K|
|00005fb0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 32 01 28 88 2d |ERNEL32.|dll2.(.-|
|00005fc0| 00 00 a0 01 01 18 47 65 | 74 50 72 69 76 61 74 65 |......Ge|tPrivate|
|00005fd0| 50 72 6f 66 69 6c 65 53 | 74 72 75 63 74 41 0c 4b |ProfileS|tructA.K|
|00005fe0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 33 01 2f 88 2d |ERNEL32.|dll3./.-|
|00005ff0| 00 00 a0 01 01 18 47 65 | 74 50 72 69 76 61 74 65 |......Ge|tPrivate|
|00006000| 50 72 6f 66 69 6c 65 53 | 74 72 75 63 74 57 0c 4b |ProfileS|tructW.K|
|00006010| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 34 01 18 88 23 |ERNEL32.|dll4...#|
|00006020| 00 00 a0 01 01 0e 47 65 | 74 50 72 6f 63 41 64 64 |......Ge|tProcAdd|
|00006030| 72 65 73 73 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ress.KER|NEL32.dl|
|00006040| 6c 35 01 59 88 2b 00 00 | a0 01 01 16 47 65 74 50 |l5.Y.+..|....GetP|
|00006050| 72 6f 63 65 73 73 41 66 | 66 69 6e 69 74 79 4d 61 |rocessAf|finityMa|
|00006060| 73 6b 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 36 |sk.KERNE|L32.dll6|
|00006070| 01 fd 88 24 00 00 a0 01 | 01 0f 47 65 74 50 72 6f |...$....|..GetPro|
|00006080| 63 65 73 73 46 6c 61 67 | 73 0c 4b 45 52 4e 45 4c |cessFlag|s.KERNEL|
|00006090| 33 32 2e 64 6c 6c 37 01 | e3 88 23 00 00 a0 01 01 |32.dll7.|..#.....|
|000060a0| 0e 47 65 74 50 72 6f 63 | 65 73 73 48 65 61 70 0c |.GetProc|essHeap.|
|000060b0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 38 01 53 88 |KERNEL32|.dll8.S.|
|000060c0| 24 00 00 a0 01 01 0f 47 | 65 74 50 72 6f 63 65 73 |$......G|etProces|
|000060d0| 73 48 65 61 70 73 0c 4b | 45 52 4e 45 4c 33 32 2e |sHeaps.K|ERNEL32.|
|000060e0| 64 6c 6c 39 01 dd 88 31 | 00 00 a0 01 01 1c 47 65 |dll9...1|......Ge|
|000060f0| 74 50 72 6f 63 65 73 73 | 53 68 75 74 64 6f 77 6e |tProcess|Shutdown|
|00006100| 50 61 72 61 6d 65 74 65 | 72 73 0c 4b 45 52 4e 45 |Paramete|rs.KERNE|
|00006110| 4c 33 32 2e 64 6c 6c 3a | 01 43 88 24 00 00 a0 01 |L32.dll:|.C.$....|
|00006120| 01 0f 47 65 74 50 72 6f | 63 65 73 73 54 69 6d 65 |..GetPro|cessTime|
|00006130| 73 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 3b 01 |s.KERNEL|32.dll;.|
|00006140| ca 88 26 00 00 a0 01 01 | 11 47 65 74 50 72 6f 63 |..&.....|.GetProc|
|00006150| 65 73 73 56 65 72 73 69 | 6f 6e 0c 4b 45 52 4e 45 |essVersi|on.KERNE|
|00006160| 4c 33 32 2e 64 6c 6c 3c | 01 e1 88 2d 00 00 a0 01 |L32.dll<|...-....|
|00006170| 01 18 47 65 74 50 72 6f | 63 65 73 73 57 6f 72 6b |..GetPro|cessWork|
|00006180| 69 6e 67 53 65 74 53 69 | 7a 65 0c 4b 45 52 4e 45 |ingSetSi|ze.KERNE|
|00006190| 4c 33 32 2e 64 6c 6c 3d | 01 10 88 23 00 00 a0 01 |L32.dll=|...#....|
|000061a0| 01 0e 47 65 74 50 72 6f | 64 75 63 74 4e 61 6d 65 |..GetPro|ductName|
|000061b0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 3e 01 48 |.KERNEL3|2.dll>.H|
|000061c0| 88 23 00 00 a0 01 01 0e | 47 65 74 50 72 6f 66 69 |.#......|GetProfi|
|000061d0| 6c 65 49 6e 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |leIntA.K|ERNEL32.|
|000061e0| 64 6c 6c 3f 01 6c 88 23 | 00 00 a0 01 01 0e 47 65 |dll?.l.#|......Ge|
|000061f0| 74 50 72 6f 66 69 6c 65 | 49 6e 74 57 0c 4b 45 52 |tProfile|IntW.KER|
|00006200| 4e 45 4c 33 32 2e 64 6c | 6c 40 01 55 88 27 00 00 |NEL32.dl|l@.U.'..|
|00006210| a0 01 01 12 47 65 74 50 | 72 6f 66 69 6c 65 53 65 |....GetP|rofileSe|
|00006220| 63 74 69 6f 6e 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ctionA.K|ERNEL32.|
|00006230| 64 6c 6c 41 01 b8 88 27 | 00 00 a0 01 01 12 47 65 |dllA...'|......Ge|
|00006240| 74 50 72 6f 66 69 6c 65 | 53 65 63 74 69 6f 6e 57 |tProfile|SectionW|
|00006250| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 42 01 a1 |.KERNEL3|2.dllB..|
|00006260| 88 26 00 00 a0 01 01 11 | 47 65 74 50 72 6f 66 69 |.&......|GetProfi|
|00006270| 6c 65 53 74 72 69 6e 67 | 41 0c 4b 45 52 4e 45 4c |leString|A.KERNEL|
|00006280| 33 32 2e 64 6c 6c 43 01 | 16 88 26 00 00 a0 01 01 |32.dllC.|..&.....|
|00006290| 11 47 65 74 50 72 6f 66 | 69 6c 65 53 74 72 69 6e |.GetProf|ileStrin|
|000062a0| 67 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 44 |gW.KERNE|L32.dllD|
|000062b0| 01 ff 88 2e 00 00 a0 01 | 01 19 47 65 74 51 75 65 |........|..GetQue|
|000062c0| 75 65 64 43 6f 6d 70 6c | 65 74 69 6f 6e 53 74 61 |uedCompl|etionSta|
|000062d0| 74 75 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |tus.KERN|EL32.dll|
|000062e0| 45 01 86 88 28 00 00 a0 | 01 01 13 47 65 74 53 4c |E...(...|...GetSL|
|000062f0| 43 61 6c 6c 62 61 63 6b | 54 61 72 67 65 74 0c 4b |Callback|Target.K|
|00006300| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 46 01 85 88 2a |ERNEL32.|dllF...*|
|00006310| 00 00 a0 01 01 15 47 65 | 74 53 4c 43 61 6c 6c 62 |......Ge|tSLCallb|
|00006320| 61 63 6b 54 65 6d 70 6c | 61 74 65 0c 4b 45 52 4e |ackTempl|ate.KERN|
|00006330| 45 4c 33 32 2e 64 6c 6c | 47 01 ab 88 26 00 00 a0 |EL32.dll|G...&...|
|00006340| 01 01 11 47 65 74 53 68 | 6f 72 74 50 61 74 68 4e |...GetSh|ortPathN|
|00006350| 61 6d 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ameA.KER|NEL32.dl|
|00006360| 6c 48 01 3b 88 26 00 00 | a0 01 01 11 47 65 74 53 |lH.;.&..|....GetS|
|00006370| 68 6f 72 74 50 61 74 68 | 4e 61 6d 65 57 0c 4b 45 |hortPath|NameW.KE|
|00006380| 52 4e 45 4c 33 32 2e 64 | 6c 6c 49 01 24 88 24 00 |RNEL32.d|llI.$.$.|
|00006390| 00 a0 01 01 0f 47 65 74 | 53 74 61 72 74 75 70 49 |.....Get|StartupI|
|000063a0| 6e 66 6f 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |nfoA.KER|NEL32.dl|
|000063b0| 6c 4a 01 dc 88 24 00 00 | a0 01 01 0f 47 65 74 53 |lJ...$..|....GetS|
|000063c0| 74 61 72 74 75 70 49 6e | 66 6f 57 0c 4b 45 52 4e |tartupIn|foW.KERN|
|000063d0| 45 4c 33 32 2e 64 6c 6c | 4b 01 c5 88 21 00 00 a0 |EL32.dll|K...!...|
|000063e0| 01 01 0c 47 65 74 53 74 | 64 48 61 6e 64 6c 65 0c |...GetSt|dHandle.|
|000063f0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 4c 01 29 88 |KERNEL32|.dllL.).|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.
